CVE-2026-23238 romfs: check sb_set_blocksize() return value
Published March 5, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-23237 platform/x86: classmate-laptop: Add missing NULL pointer checks
Published March 5, 2026
Information published.
CVE-2026-3338 PKCS7_verify Signature Validation Bypass in AWS-LC
Published March 5, 2026
Information published.
CVE-2026-23865 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
Published March 5, 2026
Information published.
CVE-2026-24821 A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.
Published March 5, 2026
Information published.
CVE-2026-27141 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
Published March 5, 2026
Information published.
CVE-2025-21985 drm/amd/display: Fix out-of-bound accesses
Published March 5, 2026
Information published.
CVE-2024-46754 bpf: Remove tst_run from lwt_seg6local_prog_ops.
Published March 5, 2026
Information published.
CVE-2024-53219 virtiofs: use pages instead of pointer for kernel direct IO
Published March 5, 2026
Information published.
CVE-2022-4543 A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.
Published March 5, 2026
Information published.
