CVE-2026-23666 .NET Framework Denial of Service Vulnerability
Published April 17, 2026
Executive Summary updated
Microsoft Security Response Center Blog Alerts
CVE-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Published April 17, 2026
Information published.
CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount
Published April 17, 2026
Information published.
CVE-2026-32282 TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Published April 17, 2026
Information published.
CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
Published April 17, 2026
Information published.
CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
Published April 17, 2026
Information published.
CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
Published April 17, 2026
Information published.
CVE-2026-35199 SymCrypt SymCryptXmssSign function – Heap overflow via 64->32-bit leaf-count truncation
Published April 17, 2026
Information published.
CVE-2026-41035
Published April 17, 2026
Information published.
CVE-2026-35469 SpdyStream: DOS on CRI
Published April 17, 2026
Information published.
