MEDIUM

CVE-2026-26081 HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

Microsoft Security Response Center • Jul 23, 2026

MEDIUM

CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info

Microsoft Security Response Center • Jul 01, 2026

MEDIUM

CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

Microsoft Security Response Center • Jul 01, 2026

MEDIUM

CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list

Microsoft Security Response Center • Jul 01, 2026

HIGH

CVE-2026-43973 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

Microsoft Security Response Center • Jun 28, 2026

MEDIUM

CVE-2026-8466 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy

Microsoft Security Response Center • May 27, 2026

MEDIUM

CVE-2026-45232 Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

Microsoft Security Response Center • May 21, 2026

INFO

CVE-2026-6238 Buffer overread in ns_printrrf with corrupted RDATA field

Microsoft Security Response Center • Apr 30, 2026

INFO

CVE-2026-31630 rxrpc: proc: size address buffers for %pISpc output

Microsoft Security Response Center • Apr 26, 2026

HIGH

CVE-2026-32316 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

Microsoft Security Response Center • Apr 17, 2026

HIGH

CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

Microsoft Security Response Center • Apr 15, 2026

HIGH

Delta Electronics ASDA-Soft

CISA All Advisories • Apr 16, 2026