CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

Microsoft Windows Subsystem for Linux (WSL2) < 2.7.10 Tampering (CVE-2026-57973) (July 2026)

The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.7.10. It is, therefore, affected by a tampering vulnerability: - Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering...

CVE-2026-54699

Warp contains an OS command injection in the WSL URL-opening fallback. When Warp runs under WSL and cannot open a URL via wslview, it uses a Windows command processor path, and a URL controlled through terminal output can reach this fallback when opened. Affected versions range from 0.2024.03.12....

CVE-2026-21237

Technical details of CVE-2026-21237 are not publicly provided in the supplied documents; no affected products, vulnerable components, or fixes are described here. Monitor for updates from official sources.

CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

Microsoft Windows Subsystem for Linux 资源管理错误漏洞

Microsoft Windows Subsystem for Linux WSL is a Linux subsystem under Windows developed by Microsoft. It serves as a compatibility layer that allows running native Linux binary executables in ELF format. There is a resource management vulnerability in Microsoft Windows Subsystem for Linux WSL...

Microsoft Windows Subsystem for Linux 资源管理错误漏洞

Microsoft Windows Subsystem for Linux WSL is a Linux subsystem under Windows developed by Microsoft. It serves as a compatibility layer that allows running native Linux binary executables in ELF format. There is a resource management vulnerability in Microsoft Windows Subsystem for Linux WSL...

Microsoft Windows Subsystem for Linux (WSL2) < 2.6.2 Remote Code Execution (November 2025)

The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.6.2. It is, therefore, affected by a remote code execution vulnerability: - Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a...

CVE-2025-62220

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network...

CVE-2025-62220

CVE-2025-62220 describes a heap-based buffer overflow in the Windows Subsystem for Linux GUI (WSL GUI), leading to remote code execution over the network. Connected sources identify this as affecting WSL2, with disclosures noting that versions prior to 2.6.2 are vulnerable (the Nessus plugin cite...

KLA90059 Multiple vulnerability in Microsoft Open Source Software

A remote code execution vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-62220 Related products Microsoft-Windows CVE list CVE-2025-62220 critical Solutio...

Microsoft Windows Subsystem for Linux 安全漏洞

Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows Subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A security vulnerability exists in the Microsoft Windows Subsystem for Linux GUI. An attacker can exploit the vulnerability to...

EUVD-2019-1323

Malware in sbrugna...

EUVD-2017-17649

Malware in sbrugna...

EUVD-2018-19980

Malware in sbrugna...

EUVD-2018-20077

Malware in sbrugna...

EUVD-2018-19988

Malware in sbrugna...

EUVD-2019-1442

Malware in sbrugna...

EUVD-2020-2130

Malware in sbrugna...

EUVD-2019-9973

Malware in sbrugna...