CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function
Published June 18, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
Published June 18, 2026
Information published.
CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
Published June 18, 2026
Information published.
CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc
Published June 18, 2026
Information published.
CVE-2025-71073 Input: lkkbd – disable pending work before freeing device
Published June 18, 2026
Information published.
CVE-2026-45445 AES-OCB IV Ignored on EVP_Cipher() Path
Published June 18, 2026
Information published.
CVE-2026-9076 Out-of-Bounds Read in CMS Password-Based Decryption
Published June 18, 2026
Information published.
CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing
Published June 18, 2026
Information published.
CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption
Published June 18, 2026
Information published.
CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption
Published June 18, 2026
Information published.
