CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
Published April 28, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
Published April 28, 2026
Information published.
CVE-2026-23364 ksmbd: Compare MACs in constant time
Published April 28, 2026
Information published.
CVE-2026-23362 can: bcm: fix locking for bcm_op runtime updates
Published April 28, 2026
Information published.
CVE-2026-31656 drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
Published April 28, 2026
Information published.
CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
Published April 28, 2026
Information published.
CVE-2026-23359 bpf: Fix stack-out-of-bounds write in devmap
Published April 28, 2026
Information published.
CVE-2026-23357 can: mcp251x: fix deadlock in error path of mcp251x_open
Published April 28, 2026
Information published.
CVE-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Published April 28, 2026
Information published.
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability
Published April 22, 2026
Added Security Only packages to Windows Server 2012 security updates. This is an informational change only.
