Month: July 2026

Information published. Continue reading CVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string→

Information published. Continue reading CVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak→

Information published. Continue reading CVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation→

Information published. Continue reading CVE-2026-53366 ipv4: account for fraggap on the paged allocation path→

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-58643 Windows Admin Center Spoofing Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Backup Engine allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability→

Information published. Continue reading CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace→