Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.5%	CVE-2026-74621Microsoft · net/sched: act_ct: fix sk_buff leak when the header checks reject a packet MediumEPSS 0.5%2026-08-24GCVE DatabaseCVE-2026-74621 CVE-2026-74621 addresses a memory leak issue in the net/sched act_ct component of Microsoft products. The flaw occurs when the header checks reject a packet, leading to a sk_buff (socket buffer) leak. This vulnerability affects multiple specific versions of Microsoft software as listed. The issue relates to resource management within network packet processing. EPSS 0.5%Vulnerability Microsoft Security Response Center #ghsa-pjmq-j37r-3mm4 #microsoft-security-response-ce	GCVE Database	2026-08-24
Medium	–	EPSS 0.5%	CVE-2026-74628Microsoft · net/x25: fix use-after-free of the socket by its timers MediumEPSS 0.5%2026-08-24GCVE DatabaseCVE-2026-74628 A use-after-free vulnerability exists in the net/x25 component related to socket timers. This issue can lead to improper handling of socket memory, potentially causing system instability or crashes. The vulnerability affects specific versions of the Microsoft product listed. No CVSS score is provided, but the severity is assessed as medium based on the description. There is no information about active exploitation or available patches in the provided data. EPSS 0.5%Vulnerability Microsoft Security Response Center #ghsa-fp3m-qh7p-hcj7 #microsoft-security-response-ce	GCVE Database	2026-08-24
Medium	–	EPSS 0.1%	CVE-2026-74689Microsoft · net/atm: fix slab-out-of-bounds read in vcc_setsockopt() MediumEPSS 0.1%2026-08-24GCVE DatabaseCVE-2026-74689 A slab-out-of-bounds read vulnerability exists in the net/atm component's vcc_setsockopt() function. This issue affects specific Microsoft-related versions listed and is classified with medium severity. No CVSS score is provided. There is no explicit patch or remediation information available in the provided data. EPSS 0.1%Vulnerability Microsoft Security Response Center #ghsa-gwfv-775p-2rj5 #microsoft-security-response-ce	GCVE Database	2026-08-24
Medium	–	EPSS 0.1%	CVE-2026-74714Microsoft · bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() MediumEPSS 0.1%2026-08-24GCVE DatabaseCVE-2026-74714 A use-after-free vulnerability exists in the bpf_iter_tcp_established_batch() function related to TCP processing in certain Microsoft-related Linux kernel versions. This flaw could lead to memory corruption issues. The vulnerability affects multiple specific kernel versions. No CVSS score is provided, and no known exploits are reported in the wild. The severity is assessed as medium based on the potential impact of use-after-free bugs. EPSS 0.1%Vulnerability Microsoft Security Response Center #ghsa-cqmm-fv72-p7f7 #microsoft-security-response-ce	GCVE Database	2026-08-24
Medium	–	EPSS 0.1%	CVE-2026-74479Microsoft · net: pktgen: fix proc entry use-after-free MediumEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74479 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.1%	CVE-2026-74516Microsoft · KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active MediumEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74516 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.3%	CVE-2026-74572Microsoft · btrfs: zoned: fix deadlock between metadata writeback and transaction commit MediumEPSS 0.3%2026-08-23GCVE DatabaseCVE-2026-74572 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
High	–	EPSS 0.1%	CVE-2026-74446Microsoft · drm/amdkfd: hold event_mutex while checkpointing CRIU events HighEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74446 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.3%	CVE-2026-74531Microsoft · Bluetooth: hci_conn: hold conn reference in abort_conn_sync() MediumEPSS 0.3%2026-08-23GCVE DatabaseCVE-2026-74531 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.1%	CVE-2026-74454Microsoft · drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size MediumEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74454 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	4.6	EPSS 0.2%	CVE-2026-66485Microsoft · Uncontrolled Memory Allocation in GNU cpio Medium4.6EPSS 0.2%2026-08-11GCVE DatabaseCVE-2026-66485 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-66485 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-11
Medium	–	EPSS 0.1%	CVE-2026-23385Microsoft · netfilter: nf_tables: clone set on flush only MediumEPSS 0.1%2026-08-09GCVE DatabaseCVE-2026-23385 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #ghsa-g792-jhj8-228v #microsoft-security-response-ce	GCVE Database	2026-08-09
High	–	EPSS 0.2%	CVE-2026-47243Microsoft · Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs HighEPSS 0.2%2026-08-09GCVE DatabaseCVE-2026-47243 CVE-2026-47243 is a vulnerability in Microsoft software identified as a guest-to-host escape via virtiofs in the Kata runtime environment. It involves a guest-root user gaining host-root privileges, classified under CWE-22 (Path Traversal). The affected version explicitly stated is version 3.0. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches at this time. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-09
Critical	–	EPSS 0.3%	CVE-2026-64534Microsoft · nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path CriticalEPSS 0.3%2026-08-07GCVE DatabaseCVE-2026-64534 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #ghsa-6vg3-7hp6-mqc5 #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.2%	CVE-2026-15157Microsoft · undici vulnerable to CRLF Injection via blob-like body 'type' property MediumEPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-15157 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #ghsa-m8rv-5g2x-5cg5 #npm #microsoft-security-response-ce	GCVE Database	2026-08-07
High	8.7	EPSS 0.5%	CVE-2026-59248Microsoft · Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS High8.7EPSS 0.5%2026-08-07GCVE DatabaseCVE-2026-59248 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Report on CVE-2026-59248 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.5%	CVE-2026-42765Microsoft · NULL Dereference in Certificate Verification with OCSP Checking MediumEPSS 0.5%2026-08-07GCVE DatabaseCVE-2026-42765 CVE-2026-42765 is a vulnerability in Microsoft software version 3.0 involving a NULL pointer dereference during certificate verification with OCSP checking. This issue relates to improper handling of null references, classified under CWE-476. No CVSS score or detailed impact information is provided. No known exploits are reported in the wild, and no patch or remediation details are available. EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	5.6	EPSS 0.2%	CVE-2026-15003Microsoft · Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service Medium5.6EPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-15003 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-15003 Vulnerability Microsoft Security Response Center #ghsa-3mxj-5hq2-2h4f #microsoft-security-response-ce #cwe-125	GCVE Database	2026-08-07
Medium	6.8	EPSS 0.2%	CVE-2026-56389Microsoft · Arbitrary Command Execution in GNU Bison Medium6.8EPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-56389 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-56389 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.6%	CVE-2026-66033Microsoft · libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation MediumEPSS 0.6%2026-07-26GCVE DatabaseCVE-2026-66033 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-26

Showing 101–120 of 647 results