Microsoft Security Response Center Blog Alerts

CVE-2021-20225 A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Published February 26, 2026

Information published.

CVE-2026-26960 node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

Published February 26, 2026

Information published.

CVE-2026-2739 This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

Published February 26, 2026

Information published.

CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability

Published February 24, 2026

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability

Published February 22, 2026

Download links fixed

CVE-2025-59213 Configuration Manager Elevation of Privilege Vulnerability

Published February 22, 2026

Updated information to include CVSS scores. This is an informational change only.

CVE-2025-71143 clk: samsung: exynos-clkout: Assign .num before accessing .hws

Published February 22, 2026

Information published.

CVE-2025-71109 MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Published February 22, 2026

Information published.

CVE-2025-71067 ntfs: set dummy blocksize to read boot_block when mounting

Published February 22, 2026

Information published.

CVE-2025-13034 No QUIC certificate pinning with GnuTLS

Published February 22, 2026

Information published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

AbuseIPDB Contributor Badge

© 2026, Network Services Group |  216.73.217.116
Contributor,  Detroit Internet Exchange