CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Published March 6, 2026
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center Blog Alerts
CVE-2026-23235 f2fs: fix out-of-bounds access in sysfs attribute read/write
Published March 6, 2026
Information published.
CVE-2026-23234 f2fs: fix to avoid UAF in f2fs_write_end_io()
Published March 6, 2026
Information published.
CVE-2026-26125 Payment Orchestrator Service Elevation of Privilege Vulnerability
Published March 6, 2026
Information published.
CVE-2026-23231 netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
Published March 5, 2026
Information published.
CVE-2025-71238 scsi: qla2xxx: Fix bsg_done() causing double free
Published March 5, 2026
Information published.
CVE-2026-23238 romfs: check sb_set_blocksize() return value
Published March 5, 2026
Information published.
CVE-2026-23237 platform/x86: classmate-laptop: Add missing NULL pointer checks
Published March 5, 2026
Information published.
CVE-2024-53219 virtiofs: use pages instead of pointer for kernel direct IO
Published March 5, 2026
Information published.
CVE-2022-4543 A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.
Published March 5, 2026
Information published.
