ConnexionCVE-2026-50012 Squid: Memory corruption in cache_digest reply handling
18 juillet 2026 à 10:01
Information published.
Vue normale
CVE-2026-47729 Squid: Memory disclosure in FTP gateway
18 juillet 2026 à 10:01
Information published.
-
MSRC Security Update Guide
- CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
18 juillet 2026 à 10:01
Information published.
-
- CVE-2026-62309 CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS
CVE-2026-62309 CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS
18 juillet 2026 à 10:01
Information published.
CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
17 juillet 2026 à 16:00
Added acknowledgements. This is an informational change only.
Chromium: CVE-2026-15905 Use after free in Aura
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15904 Use after free in Ozone
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15903 Out of bounds read and write in V8
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15902 Use after free in Cast
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15901 Use after free in Network
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15900 Use after free in GPU
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Chromium: CVE-2026-15899 Use after free in CameraCapture
18 juillet 2026 à 02:42
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
-
- CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index
CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
17 juillet 2026 à 10:02
Information published.
-
- CVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service
CVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service
17 juillet 2026 à 10:01
Information published.
-
- CVE-2026-15712 Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption
CVE-2026-15712 Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption
17 juillet 2026 à 10:01
Information published.
-
- CVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string
CVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string
17 juillet 2026 à 10:01
Information published.
-
- CVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak
CVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak
17 juillet 2026 à 10:01
Information published.
-
- CVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation
CVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation
17 juillet 2026 à 10:01
Information published.
CVE-2026-53366 ipv4: account for fraggap on the paged allocation path
17 juillet 2026 à 10:01
Information published.
-
- CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
17 juillet 2026 à 10:01
Information published.
CVE-2026-59117 Windows Terminal Remote Code Execution Vulnerability
16 juillet 2026 à 16:00
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
16 juillet 2026 à 16:00
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
-
- CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
16 juillet 2026 à 16:00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
-
- CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability
CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability
CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability
CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability
CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability
16 juillet 2026 à 16:00
Updated product information in the Software Update table. This is an informational change only.
-
- CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
16 juillet 2026 à 16:00
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
-
- CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
16 juillet 2026 à 10:39
Information published.
