CVE-2026-27135 nghttp2 Denial of service: Assertion failure due to the missing state validation
Published March 21, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-3479 pkgutil.get_data() does not enforce documented restrictions
Published March 21, 2026
Information published.
CVE-2026-30922 pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
Published March 21, 2026
Information published.
CVE-2026-3633 Libsoup: libsoup: header and http request injection via crlf injection
Published March 21, 2026
Information published.
CVE-2026-3632 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
Published March 21, 2026
Information published.
CVE-2026-3634 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
Published March 21, 2026
Information published.
CVE-2026-32766 astral-tokio-tar insufficiently validates PAX extensions during extraction
Published March 21, 2026
Information published.
CVE-2026-23276 net: add xmit recursion limit to tunnel xmit functions
Published March 21, 2026
Information published.
CVE-2026-23271 perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
Published March 21, 2026
Information published.
CVE-2026-23272 netfilter: nf_tables: unconditionally bump set->nelems before insertion
Published March 21, 2026
Information published.
