ConnexionCVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
22 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
Vue normale
Reçu — 22 juillet 2026
⏭
MSRC Security Update Guide
-
MSRC Security Update Guide
- CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability
22 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
22 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
22 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
22 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability
22 juillet 2026 à 10:41
Information published.
CVE-2026-42533 NGINX Map directive and Regex matching vulnerability
22 juillet 2026 à 10:41
Information published.
-
- CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values
22 juillet 2026 à 10:41
Information published.
-
- CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
22 juillet 2026 à 10:41
Information published.
-
- CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
22 juillet 2026 à 10:41
Information published.
-
- CVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom
CVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom
22 juillet 2026 à 10:41
Information published.
CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows
22 juillet 2026 à 10:40
Information published.
-
- CVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
CVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
22 juillet 2026 à 10:40
Information published.
-
- CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
22 juillet 2026 à 10:40
Information published.
-
- CVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
CVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
22 juillet 2026 à 10:40
Information published.
-
- CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS
CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS
22 juillet 2026 à 10:39
Information published.
-
- CVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
CVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
22 juillet 2026 à 10:39
Information published.
-
- CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
22 juillet 2026 à 10:39
Information published.
CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver
22 juillet 2026 à 10:02
Information published.
CVE-2026-64191 i2c: stub: Reject I2C block transfers with invalid length
22 juillet 2026 à 10:02
Information published.
-
- CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
22 juillet 2026 à 10:02
Information published.
-
- CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize
CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize
22 juillet 2026 à 10:02
Information published.
-
- CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change
CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path
CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-64187 xfs: fail recovery on a committed log item with no regions
CVE-2026-64187 xfs: fail recovery on a committed log item with no regions
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero
CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero
22 juillet 2026 à 10:01
Information published.
-
- CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c
CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c
22 juillet 2026 à 10:01
Information published.
Reçu — 21 juillet 2026
⏭
MSRC Security Update Guide
CVE-2026-58640 Windows NTFS Remote Code Execution Vulnerability
21 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
21 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto
CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto
21 juillet 2026 à 10:44
Information published.
CVE-2026-63796 ocfs2: reject oversized group bitmap descriptors
21 juillet 2026 à 10:44
Information published.
CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()
21 juillet 2026 à 10:44
Information published.
CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()
21 juillet 2026 à 10:44
Information published.
-
- CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
21 juillet 2026 à 10:42
Information published.
-
- CVE-2026-38755 A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
-
- CVE-2026-38754 A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
-
- CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
21 juillet 2026 à 10:41
Information published.
