A vulnerability identified as CVE-2026-116630 affects version 3.0 of the Microsoft product undici. It involves cross-user information disclosure through cross-origin redirect revalidation. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor at this time.
A vulnerability identified as CVE-2026-120423 affects the undici library version 3.0, allowing a Subresource Integrity (SRI) bypass via whitespace in integrity metadata. This could potentially undermine the security guarantees provided by SRI checks.
The undici library version 3.0 is vulnerable to cache poisoning and cross-user data disclosure through intermediate redirect hops. This vulnerability involves improper handling of redirects that can lead to unauthorized data exposure between users.
A vulnerability identified as CVE-2026-120415 affects the undici HTTP client library version 3.0. This flaw allows cross-origin credential disclosure by bypassing redirect stripping through the use of array-of-tuples headers. The issue is categorized under CWE-200, indicating information exposure. No CVSS score or detailed impact metrics are provided.
CVE-2026-123605 is a vulnerability in Hickory DNS version 3.0 that allows DNSSEC validation bypass via manipulation of the RRSIG signer's name. This flaw could undermine the integrity of DNSSEC validation, potentially allowing attackers to bypass DNS security checks.
CVE-2026-123596 is a vulnerability in Hickory DNS version 3.0 involving DNSSEC validation bypass via ancestor-delegation NSEC records. This flaw could allow an attacker to bypass DNSSEC validation checks, potentially undermining DNS security. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-123581 is a vulnerability in Hickory DNS version 3.0 that allows DNSSEC validation to be bypassed via an unrelated resource record set (RRset). This flaw could undermine the integrity checks DNSSEC is designed to provide.
CVE-2026-123608 is a vulnerability in Hickory DNS hickory-proto version 3.0 involving CPU exhaustion caused by BinEncoder name compression. The issue relates to inefficient processing that can lead to resource exhaustion. No CVSS score or detailed impact information is provided.
CVE-2026-123576 is a vulnerability in Hickory DNS versions 0.24.0 through 0.26.1 that allows memory exhaustion via DNS-over-QUIC requests. The issue relates to resource management under specific network request conditions.
CVE-2026-123593 is a vulnerability in Hickory DNS versions before 0.26.2 that allows bypassing DNSSEC validation via TrustAnchors. The affected product is Microsoft-related software, specifically version 3.0. No CVSS score or detailed impact information is provided.
CVE-2026-123577 is a denial of service vulnerability in Hickory DNS versions 0.24.0 up to but not including 0.26.2 related to unbounded request bodies in DNS over HTTPS (DoH) handling. This flaw could allow an attacker to cause resource exhaustion by sending excessively large request bodies. The vulnerability affects Hickory DNS version 3.0 as stated, though no detailed patch or remediation information is provided.
CVE-2026-123599 is a vulnerability in Hickory DNS versions before 0.26.0-beta.1 that allows DNSSEC validation to be bypassed via non-IN class records. This flaw affects Microsoft product version 3.0. No CVSS score or detailed impact information is provided.
CVE-2026-123594 is a vulnerability in Hickory DNS version 3.0 involving DNSSEC NSEC validation bypass for empty non-terminals. The issue relates to improper validation that could affect DNS security. No CVSS score or detailed impact information is provided.
CVE-2026-123570 is a vulnerability in Hickory DNS versions from 0.18 up to but not including 0.26.2 that allows memory amplification leading to a denial of service (DoS) via resource record (RR) counts. The affected product is Microsoft software version 3.0. No CVSS score or detailed impact metrics are provided.
CVE-2026-123876 is a vulnerability in Podman containers-common version 3.0 involving default seccomp rules that deny af_vsock and netlink_audit. These deny rules can be bypassed on 32-bit systems, potentially allowing unintended access or actions.
CVE-2026-123613 is a vulnerability in Rustls versions before 0.23.45, specifically version 0.23.13, that allows bypassing the TLS 1.3 handshake encryption level. The vulnerability is identified by Microsoft Security Response Center and is categorized under CWE-20 (Improper Input Validation). No CVSS score or detailed impact information is provided. No patch links or remediation details are available in the provided data.
CVE-2026-123611 is a vulnerability in rustls before version 0.23.46 that allows a key exchange downgrade via an unauthenticated ServerHello message. The vulnerability is identified by CWE-757 and affects version 3.0 of the Microsoft product referencing rustls. No CVSS score or detailed impact information is provided.
CVE-2026-123609 is a vulnerability in Rustls versions before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 that involves secret exposure via debug functionality. The vulnerability is identified as CWE-212, which relates to exposure of sensitive information. The affected product is Microsoft-related software with version 3.0 noted. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.
A denial of service vulnerability exists in rustls before version 0.23.46 due to Brotli certificate decompression. This flaw could allow an attacker to cause resource exhaustion by exploiting the decompression process of certificates.
CVE-2026-54914 is a heap buffer overflow vulnerability in the WebAssembly Micro Runtime (WAMR) specifically in the WASI poll_oneoff output buffer. This flaw affects version 3.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.