CVE-2026-35385
Information published. Continue reading CVE-2026-35385
Month: April 2026
CVE-2026-35387
Information published. Continue reading CVE-2026-35387
CVE-2026-35388
Information published. Continue reading CVE-2026-35388
CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()
Information published. Continue reading CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()
CVE-2026-31408 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
CVE-2026-31407 netfilter: conntrack: add missing netlink policy validations
Information published. Continue reading CVE-2026-31407 netfilter: conntrack: add missing netlink policy validations
CVE-2026-31410 ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
Information published. Continue reading CVE-2026-31410 ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations
The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize recently disclosed vulnerabilities to obtain initial access, exfiltrate data, and deploy Medusa ransomware.
The post Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations appeared first on Microsoft Security Blog.