https://patchapalooza.com/activity 2026-03-21T00:37:11.000Z Recently modified Microsoft CVEs across all Patch Tuesday months. https://patchapalooza.com/cve/CVE-2026-27135#2026-03-21T00:37:11.000Z 2026-03-21T00:37:11.000Z

nghttp2 Denial of service: Assertion failure due to the missing state validation (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-27459#2026-03-21T00:37:02.000Z 2026-03-21T00:37:02.000Z

pyOpenSSL DTLS cookie callback buffer overflow (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-27448#2026-03-21T00:36:53.000Z 2026-03-21T00:36:53.000Z

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-32775#2026-03-21T00:36:45.000Z 2026-03-21T00:36:45.000Z

(2026-Mar)

https://patchapalooza.com/cve/CVE-2026-3479#2026-03-21T00:03:01.000Z 2026-03-21T00:03:01.000Z

pkgutil.get_data() does not enforce documented restrictions (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-30922#2026-03-21T00:02:51.000Z 2026-03-21T00:02:51.000Z

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-3633#2026-03-21T00:02:43.000Z 2026-03-21T00:02:43.000Z

Libsoup: libsoup: header and http request injection via crlf injection (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-3632#2026-03-21T00:02:34.000Z 2026-03-21T00:02:34.000Z

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-3634#2026-03-21T00:02:26.000Z 2026-03-21T00:02:26.000Z

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-32766#2026-03-21T00:02:18.000Z 2026-03-21T00:02:18.000Z

astral-tokio-tar insufficiently validates PAX extensions during extraction (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23276#2026-03-21T00:01:49.000Z 2026-03-21T00:01:49.000Z

net: add xmit recursion limit to tunnel xmit functions (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23271#2026-03-21T00:01:44.000Z 2026-03-21T00:01:44.000Z

perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23272#2026-03-21T00:01:38.000Z 2026-03-21T00:01:38.000Z

netfilter: nf_tables: unconditionally bump set->nelems before insertion (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23278#2026-03-21T00:01:33.000Z 2026-03-21T00:01:33.000Z

netfilter: nf_tables: always walk all pending catchall elements (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23277#2026-03-21T00:01:27.000Z 2026-03-21T00:01:27.000Z

net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23274#2026-03-21T00:01:22.000Z 2026-03-21T00:01:22.000Z

netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23204#2026-03-21T00:01:16.000Z 2026-03-21T00:01:16.000Z

net/sched: cls_u32: use skb_header_pointer_careful() (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23266#2026-03-20T13:38:03.000Z 2026-03-20T13:38:03.000Z

fbdev: rivafb: fix divide error in nv3_arb() (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23267#2026-03-20T13:37:56.000Z 2026-03-20T13:37:56.000Z

f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23259#2026-03-20T13:37:49.000Z 2026-03-20T13:37:49.000Z

io_uring/rw: free potentially allocated iovec on cache put failure (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71265#2026-03-20T13:37:34.000Z 2026-03-20T13:37:34.000Z

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23243#2026-03-20T13:37:28.000Z 2026-03-20T13:37:28.000Z

RDMA/umad: Reject negative data_len in ib_umad_write (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71267#2026-03-20T13:37:21.000Z 2026-03-20T13:37:21.000Z

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71266#2026-03-20T13:37:15.000Z 2026-03-20T13:37:15.000Z

fs: ntfs3: check return value of indx_find to avoid infinite loop (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23248#2026-03-20T13:37:08.000Z 2026-03-20T13:37:08.000Z

perf/core: Fix refcount bug and potential UAF in perf_mmap (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23242#2026-03-20T13:37:01.000Z 2026-03-20T13:37:01.000Z

RDMA/siw: Fix potential NULL pointer dereference in header processing (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23233#2026-03-20T13:36:55.000Z 2026-03-20T13:36:55.000Z

f2fs: fix to avoid mapping wrong physical block for swapfile (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71239#2026-03-20T13:36:34.000Z 2026-03-20T13:36:34.000Z

audit: add fchmodat2() to change attributes class (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23241#2026-03-20T13:36:27.000Z 2026-03-20T13:36:27.000Z

audit: add missing syscalls to read class (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23231#2026-03-20T13:36:08.000Z 2026-03-20T13:36:08.000Z

netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71238#2026-03-20T13:36:01.000Z 2026-03-20T13:36:01.000Z

scsi: qla2xxx: Fix bsg_done() causing double free (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23236#2026-03-20T13:35:54.000Z 2026-03-20T13:35:54.000Z

fbdev: smscufx: properly copy ioctl memory to kernelspace (2026-Mar)

https://patchapalooza.com/cve/CVE-2025-71233#2026-03-20T13:35:48.000Z 2026-03-20T13:35:48.000Z

PCI: endpoint: Avoid creating sub-groups asynchronously (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23221#2026-03-20T13:35:41.000Z 2026-03-20T13:35:41.000Z

bus: fsl-mc: fix use-after-free in driver_override_show() (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-26118#2026-03-20T06:00:00.000Z 2026-03-20T06:00:00.000Z

Azure MCP Server Tools Elevation of Privilege Vulnerability (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-3731#2026-03-20T00:38:05.000Z 2026-03-20T00:38:05.000Z

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds (2026-Mar)

https://patchapalooza.com/cve/CVE-2024-8354#2026-03-20T00:36:25.000Z 2026-03-20T00:36:25.000Z

Qemu-kvm: usb: assertion failure in usb_ep_get() (2024-Sep)

https://patchapalooza.com/cve/CVE-2022-46456#2026-03-20T00:35:47.000Z 2026-03-20T00:35:47.000Z

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c. (2023-Jan)

https://patchapalooza.com/cve/CVE-2006-10003#2026-03-20T00:04:51.000Z 2026-03-20T00:04:51.000Z

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack (2026-Mar)

https://patchapalooza.com/cve/CVE-2006-10002#2026-03-20T00:04:46.000Z 2026-03-20T00:04:46.000Z

XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes (2026-Mar)

https://patchapalooza.com/cve/CVE-2026-23229#2026-03-20T00:04:38.000Z 2026-03-20T00:04:38.000Z

crypto: virtio - Add spinlock protection with virtqueue notification (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23228#2026-03-20T00:04:33.000Z 2026-03-20T00:04:33.000Z

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23227#2026-03-20T00:04:28.000Z 2026-03-20T00:04:28.000Z

drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23222#2026-03-20T00:04:23.000Z 2026-03-20T00:04:23.000Z

crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23220#2026-03-20T00:04:12.000Z 2026-03-20T00:04:12.000Z

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23214#2026-03-20T00:04:07.000Z 2026-03-20T00:04:07.000Z

btrfs: reject new transactions if the fs is fully read-only (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23213#2026-03-20T00:04:02.000Z 2026-03-20T00:04:02.000Z

drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23212#2026-03-20T00:03:57.000Z 2026-03-20T00:03:57.000Z

bonding: annotate data-races around slave->last_rx (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23208#2026-03-20T00:03:53.000Z 2026-03-20T00:03:53.000Z

ALSA: usb-audio: Prevent excessive number of frames (2026-Feb)

https://patchapalooza.com/cve/CVE-2026-23191#2026-03-20T00:03:47.000Z 2026-03-20T00:03:47.000Z

ALSA: aloop: Fix racy access at PCM trigger (2026-Feb)