Threats Tagged 'microsoft-security-response-ce'

CVE-2026-56289 is a vulnerability identified as a loop with an unreachable exit condition in GNU patch version 3.0. This issue relates to a software defect where a loop may never terminate due to its exit condition being unreachable. No CVSS score or detailed impact information is provided. There are no known exploits in the wild and no patch or remediation details have been disclosed.

CVE-2026-56288 is a NULL pointer dereference vulnerability identified in GNU patch version 3.0. This type of vulnerability can cause the affected software to crash or behave unexpectedly when it attempts to access memory through a NULL pointer. The information provided does not include details on exploitation methods or impact beyond the dereference issue. No patch or remediation information is currently available from the vendor advisory. There is no evidence of known exploits in the wild at this time.

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash. This issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.

CVE-2026-53354 is a vulnerability related to TLBI errata mitigation on various Arm CPUs in Microsoft software version 3.0. The provided information does not include technical details about the nature of the vulnerability or its exploitation. No CVSS score is available, and no known exploits are reported in the wild.

CVE-2026-53345 is a vulnerability related to the KVM component in Microsoft software where a warning is not triggered if memory is dirtied without a vCPU when the virtual machine is shutting down. The vulnerability affects version 3.0 of the product. No CVSS score or detailed impact information is provided. There are no known exploits in the wild and no patch or remediation information is available at this time.

CVE-2026-53336 is a vulnerability identified in Microsoft software version 3.0 related to the nvmem layouts onie-tlv component, specifically addressing a hang condition when encountering unknown types. The provided description does not include detailed technical information or exploitation methods. No CVSS score is available for this vulnerability.

CVE-2026-53339 is a vulnerability related to a NULL pointer dereference in the i2c qcom-cci driver, specifically in the cci_remove() function. The vulnerability affects version 3.0 of the Microsoft product referenced. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle