<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from csaf_microsoft</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 23:07:40 +0000</lastBuildDate>
    <item>
      <title>msrc_CVE-2026-76844 — zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-76844</link>
      <description>msrc_CVE-2026-76844</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-76844</guid>
      <pubDate>Fri, 02 Oct 2026 01:02:06 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-92382 — Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-92382</link>
      <description>msrc_CVE-2026-92382</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-92382</guid>
      <pubDate>Thu, 01 Oct 2026 01:27:04 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-100419 — gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-100419</link>
      <description>msrc_CVE-2026-100419</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-100419</guid>
      <pubDate>Thu, 01 Oct 2026 01:26:43 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-95519 — Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-95519</link>
      <description>msrc_CVE-2026-95519</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-95519</guid>
      <pubDate>Thu, 01 Oct 2026 01:26:05 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-95521 — Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-95521</link>
      <description>msrc_CVE-2026-95521</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-95521</guid>
      <pubDate>Thu, 01 Oct 2026 01:25:41 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-67407 — RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic…</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-67407</link>
      <description>msrc_CVE-2026-67407</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-67407</guid>
      <pubDate>Thu, 01 Oct 2026 01:25:02 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-67224 — RabbitMQ: Admin path-traversal write via trace name</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-67224</link>
      <description>msrc_CVE-2026-67224</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-67224</guid>
      <pubDate>Thu, 01 Oct 2026 01:24:46 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-67413 — RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Express…</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-67413</link>
      <description>msrc_CVE-2026-67413</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-67413</guid>
      <pubDate>Thu, 01 Oct 2026 01:24:29 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-67420 — RabbitMQ OAuth credential refresh retains revoked runtime tags</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-67420</link>
      <description>msrc_CVE-2026-67420</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-67420</guid>
      <pubDate>Thu, 01 Oct 2026 01:24:13 +0000</pubDate>
    </item>
    <item>
      <title>msrc_CVE-2026-67410 — RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-67410</link>
      <description>msrc_CVE-2026-67410</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-67410</guid>
      <pubDate>Thu, 01 Oct 2026 01:23:56 +0000</pubDate>
    </item>
  </channel>
</rss>
