Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.3	EPSS 0.5%	CVE-2026-43966cowboy · cowboy and gun affected by an HTTP Request/Response Splitting vulnerability (CVE-2026-43966) Medium6.3EPSS 0.5%2026-06-08GCVE DatabaseCVE-2026-43966 An HTTP Request/Response Splitting vulnerability (CWE-113) exists in the cowlib library used by cowboy and gun. The vulnerability arises because the encoder escapes only backslash and double quote characters but allows other bytes, including CR and LF, to pass through. This mismatch with the parser's expectations enables an attacker to inject CRLF sequences into HTTP headers, potentially splitting the response. This affects cowlib versions prior to 2.16.0. EPSS 0.5%Report on CVE-2026-43966 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce #ghsa-w4f7-4cxr-rv3c #hex	GCVE Database	2026-06-08
Medium	5.5	EPSS <0.1%	CVE-2026-46252Microsoft · regulator: core: fix locking in regulator_resolve_supply() error path Medium5.5EPSS <0.1%2026-06-02GCVE DatabaseCVE-2026-46252 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS <0.1%Vulnerability Microsoft Security Response Center #ghsa-w447-hxj8-xq6p #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.5%	CVE-2026-52954Microsoft · libceph: handle rbtree insertion error in decode_choose_args() MediumEPSS 0.5%2026-06-02GCVE DatabaseCVE-2026-52954 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.2%	CVE-2026-52992Microsoft · fs/adfs: validate nzones in adfs_validate_bblk() MediumEPSS 0.2%2026-06-02GCVE DatabaseCVE-2026-52992 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.4%	CVE-2026-53010Microsoft · ksmbd: fix use-after-free in smb2_open during durable reconnect MediumEPSS 0.4%2026-06-02GCVE DatabaseCVE-2026-53010 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.1%	CVE-2026-53160Microsoft · misc: fastrpc: fix use-after-free race in fastrpc_map_create MediumEPSS 0.1%2026-06-02GCVE DatabaseCVE-2026-53160 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.2%	CVE-2026-53130Microsoft · fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START MediumEPSS 0.2%2026-06-02GCVE DatabaseCVE-2026-53130 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.1%	CVE-2026-52962Microsoft · ceph: fix a buffer leak in __ceph_setxattr() MediumEPSS 0.1%2026-06-02GCVE DatabaseCVE-2026-52962 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.3%	CVE-2026-53196Microsoft · USB: serial: io_ti: fix heap overflow in get_manuf_info() MediumEPSS 0.3%2026-06-02GCVE DatabaseCVE-2026-53196 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.1%	CVE-2026-52913Microsoft · batman-adv: v: stop OGMv2 on disabled interface MediumEPSS 0.1%2026-06-02GCVE DatabaseCVE-2026-52913 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.5%	CVE-2026-53043Microsoft · ocfs2/dlm: validate qr_numregions in dlm_match_regions() MediumEPSS 0.5%2026-06-02GCVE DatabaseCVE-2026-53043 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.7%	CVE-2026-52911Microsoft · ksmbd: scope conn->binding slowpath to bound sessions only MediumEPSS 0.7%2026-06-02GCVE DatabaseCVE-2026-52911 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.7%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.4%	CVE-2026-53049Microsoft · gfs2: add some missing log locking MediumEPSS 0.4%2026-06-02GCVE DatabaseCVE-2026-53049 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.5%	CVE-2026-53045Microsoft · memory: tegra124-emc: Fix dll_change check MediumEPSS 0.5%2026-06-02GCVE DatabaseCVE-2026-53045 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.2%	CVE-2026-53039Microsoft · ocfs2: validate group add input before caching MediumEPSS 0.2%2026-06-02GCVE DatabaseCVE-2026-53039 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.7%	CVE-2026-53046Microsoft · ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine MediumEPSS 0.7%2026-06-02GCVE DatabaseCVE-2026-53046 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.7%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.4%	CVE-2026-53309Microsoft · ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison MediumEPSS 0.4%2026-06-02GCVE DatabaseCVE-2026-53309 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Critical	–	EPSS 4.0%	CVE-2026-55200Microsoft · libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c CriticalEPSS 4.0%2026-06-02GCVE DatabaseCVE-2026-55200 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 4.0%Vulnerability Microsoft Security Response Center #ghsa-r8mh-x5qv-7gg2 #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	–	EPSS 0.2%	CVE-2026-52918Microsoft · Bluetooth: serialize accept_q access MediumEPSS 0.2%2026-06-02GCVE DatabaseCVE-2026-52918 CVE-2026-52918 is a vulnerability in Microsoft software related to Bluetooth functionality, specifically involving serialization of accept_q access. The provided information is limited and does not detail the exact nature or exploitation method of the vulnerability. Only version 3.0 of the affected product is explicitly identified as vulnerable. No CVSS score or detailed impact information is available. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-06-02
Medium	5.5	EPSS 0.1%	CVE-2026-53167Microsoft · fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios Medium5.5EPSS 0.1%2026-06-02GCVE DatabaseCVE-2026-53167 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce #ghsa-vg6g-9h68-878w	GCVE Database	2026-06-02

Showing 161–180 of 647 results