Microsoft Security Response Center Blog Alerts

Chromium: CVE-2026-4455 Heap buffer overflow in PDFium

Published March 24, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Chromium: CVE-2026-4454 Use after free in Network

Published March 24, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

CVE-2026-4438 gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

Published March 24, 2026

Information published.

CVE-2026-4437 gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

Published March 24, 2026

Information published.

CVE-2026-3479 pkgutil.get_data() does not enforce documented restrictions

Published March 21, 2026

Information published.

CVE-2026-30922 pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Published March 21, 2026

Information published.

CVE-2026-3633 Libsoup: libsoup: header and http request injection via crlf injection

Published March 21, 2026

Information published.

CVE-2026-3632 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Published March 21, 2026

Information published.

CVE-2026-3634 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

Published March 21, 2026

Information published.

CVE-2026-32766 astral-tokio-tar insufficiently validates PAX extensions during extraction

Published March 21, 2026

Information published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

AbuseIPDB Contributor Badge

© 2026, Network Services Group |  216.73.216.253
Contributor,  Detroit Internet Exchange