MSRC Reports
@msrcreports
61 subscribers
2.97K links
Microsoft Security Response Center Reports
(Unofficial).

Reports usually come in bursts, because that's just how Microsoft releases them.
Download Telegram
About
Blog
Apps
Platform
Join
MSRC Reports
61 subscribers
MSRC Reports
CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11411
28 views
MSRC Reports
CVE-2025-11840 GNU Binutils ldmisc.c vfinfo out-of-bounds

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11840
23 views
MSRC Reports
CVE-2025-40049 Squashfs: fix uninit-value in squashfs_get_parent

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40049
23 views
MSRC Reports
CVE-2025-40081 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40081
23 views
MSRC Reports
CVE-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40048
21 views
MSRC Reports
CVE-2025-40036 misc: fastrpc: fix possible map leak in fastrpc_put_args

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40036
17 views
MSRC Reports
CVE-2025-40039 ksmbd: Fix race condition in RPC handle list access

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40039
15 views
MSRC Reports
CVE-2025-40043 net: nfc: nci: Add parameter validation for packet data

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40043
13 views
MSRC Reports
CVE-2025-40074 ipv4: start using dst_dev_rcu()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40074
14 views
MSRC Reports
CVE-2025-40033 remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40033
13 views
MSRC Reports
CVE-2025-40032 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40032
14 views
MSRC Reports
CVE-2025-40080 nbd: restrict sockets to TCP and UDP

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40080
15 views
MSRC Reports
CVE-2025-40060 coresight: trbe: Return NULL pointer for allocation failures

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40060
15 views
MSRC Reports
CVE-2025-40026 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40026
13 views
MSRC Reports
CVE-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40040
12 views
MSRC Reports
CVE-2025-40056 vhost: vringh: Fix copy_to_iter return value check

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40056
13 views
MSRC Reports
CVE-2025-40055 ocfs2: fix double free in user_cluster_connect()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40055
14 views
MSRC Reports
CVE-2025-40053 net: dlink: handle copy_thresh allocation failure

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40053
15 views
MSRC Reports
CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40035
15 views
MSRC Reports
CVE-2025-40030 pinctrl: check the return value of pinmux_ops::get_function_name()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40030
15 views
MSRC Reports
CVE-2025-40052 smb: client: fix crypto buffers in non-linear memory

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40052
16 views