Month: February 2026

Improper control of generation of code (‘code injection’) in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network. Continue reading CVE-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability→

Binding to an unrestricted ip address in Azure IoT SDK allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability→

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability→