CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc
Published June 18, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-46293 clk: microchip: mpfs-ccc: fix out of bounds access during output registration
Published June 18, 2026
Information published.
CVE-2026-46291 crypto: caam – guard HMAC key hex dumps in hash_digest_key
Published June 18, 2026
Information published.
CVE-2026-46274 io-wq: check that the predecessor is hashed in io_wq_remove_pending()
Published June 18, 2026
Information published.
CVE-2026-46292 pmdomain: core: Fix detach procedure for virtual devices in genpd
Published June 18, 2026
Information published.
CVE-2025-71072 shmem: fix recovery on rename failures
Published June 18, 2026
Information published.
CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability
Published June 17, 2026
Acknowledgement added. This is an informational change only.
CVE-2026-42915 Microsoft Windows VMSwitch Denial of Service Vulnerability
Published June 16, 2026
Corrected the CVE description and title. This is an informational change only.
CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability
Published June 16, 2026
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as “RoguePlanet “. We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Published June 16, 2026
Updated CWE value. This is an informational change only.
