UBUNTU-CVE-2026-15712

A heap buffer over-read vulnerability was discovered in libsoup's versions: libsoup 3.0 to 3.7.0 HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" payload by assuming the data stream is a safely NUL-terminate...

CVE-2026-15712

A heap buffer over-read vulnerability was discovered in libsoup's versions: libsoup 3.0 to 3.7.0 HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" payload by assuming the data stream is a safely NUL-terminate...

CVE-2026-15712

CVE-2026-15712 affects libsoup’s HTTP/2 connection tracking in/libsoup3 (versions 3.0–3.7.0) where the GOAWAY frame’s Additional Debug Data is parsed as a NUL-terminated C-string without strict length checks. This permits a remote, unauthenticated attacker to send malformed GOAWAY frames, causing...

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

CVE-2026-15747

creationtimestamp| type| source ---|---|--- 2026-07-14 17:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmquxixea2t 2026-07-15 17:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbfq4srt2w 2026-07-16 09:32:04+00:00| seen|...

CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability

...

CVE-2026-49788 HTTP/2 Denial of Service Vulnerability

...

CVE-2026-49788

CVE-2026-49788 : An HTTP/2 denial-of-service vulnerability due to unbounded resource allocation allows an unauthenticated network attacker to exhaust resources and disrupt service. CVSSv3.1 base score 7.5 (HIGH); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. No product/vendor/version details are p...

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5102203)

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 KB5102203...

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5102205)

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5102205...

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5099535)

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5099535...

2026-07 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5099539)

2026-07 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems KB5099539...

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5099539)

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5099539...

2026-07 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5099540)

2026-07 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5099540...

2026-07 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5099539)

2026-07 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems KB5099539...

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5099539)

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5099539...

CVE-2026-58479

creationtimestamp| type| source ---|---|--- 2026-07-14 15:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkz5lbib2g 2026-07-14 16:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmmsjcdhx2r 2026-07-15 04:07:07+00:00| seen|...

BIT-NATS-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable replay could deliver messages whose original topics matched a subscriber configured subscribe deny rule because these...