Threat database

800 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.1%	CVE-2026-23113Microsoft · io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23113 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23207Microsoft · spi: tegra210-quad: Protect curr_xfer check in IRQ handler MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23207 This vulnerability (CVE-2026-23207) involves a race condition in the SPI driver for Tegra210 Quad (Linux kernel) related to the protection of the curr_xfer check in the IRQ handler. It is classified as a medium severity issue and is associated with CWE-362 (race condition). The vulnerability affects multiple specific Linux kernel versions, including various 4.15.x, 5.0.x, and 5.3.x builds, as well as all versions prior to 5.15.0-1109.118. A patch is available to address this issue. The vendor advisory from Ubuntu confirms multiple Linux kernel vulnerabilities were fixed, including this one, and recommends updating to the fixed kernel versions. EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23141Microsoft · btrfs: send: check for inline extents in range_is_hole_in_parent() MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23141 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2026-23138Microsoft · tracing: Add recursion protection in kernel stack trace recording MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23138 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2026-23137Microsoft · of: unittest: Fix memory leak in unittest_data_add() MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23137 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2025-71202Microsoft · iommu/sva: invalidate stale IOTLB entries for kernel address space MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2025-71202 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
High	–	EPSS 0.8%	CVE-2026-23231Microsoft · netfilter: nf_tables: fix use-after-free in nf_tables_addchain() HighEPSS 0.8%2026-03-05GCVE DatabaseCVE-2026-23231 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.8%Vulnerability Microsoft Security Response Center #linux #cloud #microsoft-security-response-ce	GCVE Database	2026-03-05
High	7.8	EPSS 0.2%	CVE-2026-23278Microsoft · netfilter: nf_tables: always walk all pending catchall elements High7.8EPSS 0.2%2026-03-02GCVE DatabaseCVE-2026-23278 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #ghsa-5vxp-pqjj-287g #microsoft-security-response-ce	GCVE Database	2026-03-02
Medium	–	EPSS 0.1%	CVE-2026-22979Microsoft · net: fix memory leak in skb_segment_list for GRO packets MediumEPSS 0.1%2026-02-28GCVE DatabaseCVE-2026-22979 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.4%	CVE-2025-71161Microsoft · dm-verity: disable recursive forward error correction MediumEPSS 0.4%2026-02-28GCVE DatabaseCVE-2025-71161 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.2%	CVE-2025-71160Microsoft · netfilter: nf_tables: avoid chain re-validation if possible MediumEPSS 0.2%2026-02-28GCVE DatabaseCVE-2025-71160 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Low	–	EPSS 0.1%	CVE-2025-71152Microsoft · net: dsa: properly keep track of conduit reference LowEPSS 0.1%2026-02-28GCVE DatabaseCVE-2025-71152 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.3%	CVE-2025-71150Microsoft · ksmbd: Fix refcount leak when invalid session is found on session lookup MediumEPSS 0.3%2026-02-28GCVE DatabaseCVE-2025-71150 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Low	2.3	EPSS 0.5%	CVE-2026-21620Microsoft · TFTP Path Traversal Low2.3EPSS 0.5%2026-02-25GCVE DatabaseCVE-2026-21620 This security update for Erlang addresses multiple vulnerabilities including a path traversal flaw in TFTP and SFTP servers, HTTP request smuggling, denial of service via SSH data handling, unauthorized CGI script access, DNS cache poisoning, and OCSP authorization bypass. These vulnerabilities could allow unauthorized data access, denial of service, and information disclosure. The update also includes unrelated bug fixes. EPSS 0.5%Report on CVE-2026-21620 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-25
Medium	–	EPSS 0.3%	CVE-2026-2492Microsoft · TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability MediumEPSS 0.3%2026-02-23GCVE DatabaseCVE-2026-2492 A local privilege escalation vulnerability exists in the TensorFlow HDF5 library due to an uncontrolled search path element. This vulnerability is identified as CVE-2026-2492 and affects Microsoft products, specifically versions 2.0 and 3.0. No CVSS score or detailed technical exploit information is provided. No patch or remediation guidance is currently available from the vendor. The vulnerability relates to CWE-427, which involves unsafe search path elements that could be exploited to escalate privileges locally. EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-23
Medium	–	EPSS 0.4%	CVE-2025-39770Microsoft · net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM MediumEPSS 0.4%2026-01-18GCVE DatabaseCVE-2025-39770 A vulnerability identified as CVE-2025-39770 affects certain Microsoft products related to network generic segmentation offload (GSO) functionality. The issue involves forbidding IPv6 TCP segmentation offload (TSO) with extensions on devices that only support IPV6_CSUM, potentially preventing improper handling of IPv6 packets. A patch is available to address this vulnerability. The severity is assessed as medium based on the impact description. EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-01-18
Medium	–	EPSS 0.2%	CVE-2025-71109Microsoft · MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits MediumEPSS 0.2%2026-01-16GCVE DatabaseCVE-2025-71109 A memory corruption vulnerability exists in the MIPS ftrace subsystem when the kernel is located beyond 32 bits. This issue is part of multiple Linux kernel vulnerabilities fixed in a security update. The vulnerability could potentially be exploited to compromise the system. A patch is available to address this and other related kernel flaws. Users should apply the update and reboot to ensure protection. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-01-16
Medium	–	EPSS 0.1%	CVE-2025-71074Microsoft · functionfs: fix the open/removal races MediumEPSS 0.1%2026-01-15GCVE DatabaseCVE-2025-71074 CVE-2025-71074 is a medium severity vulnerability affecting specific versions of Microsoft software related to functionfs, involving race conditions during open and removal operations. The issue is categorized under CWE-362, indicating a race condition vulnerability. No exploit is known to be in the wild, and no patch or remediation details are provided in the available data. EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-01-15
Medium	–	EPSS 0.1%	CVE-2025-71073Microsoft · Input: lkkbd - disable pending work before freeing device MediumEPSS 0.1%2026-01-15GCVE DatabaseCVE-2025-71073 CVE-2025-71073 is a vulnerability related to the 'lkkbd' component where pending work is not properly disabled before freeing a device. This issue is associated with Microsoft products, including Azure Linux versions 2.0 and 3.0. No CVSS score or detailed technical impact information is provided. There is no indication of known exploits in the wild or available patches at this time. EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-01-15
Medium	–	EPSS 0.3%	CVE-2025-71095Microsoft · net: stmmac: fix the crash issue for zero copy XDP_TX action MediumEPSS 0.3%2026-01-15GCVE DatabaseCVE-2025-71095 A vulnerability in the Linux kernel's stmmac network driver causes a crash when using the zero copy XDP_TX action due to improper handling of memory types, leading to a kernel panic. This issue has been fixed by adding a memory type check in the affected function. The vulnerability affects certain Linux kernel versions used in Microsoft Azure Linux and Ubuntu distributions. A patch is available and users are advised to update their systems to the fixed kernel versions. EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-01-15

Showing 701–720 of 800 results