{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability","@odata.count":30247,"value":[{"id":"00000000-0000-0000-0000-0000617dbb56","releaseDate":"2026-10-16T01:07:43-07:00","cveNumber":"CVE-2026-98156","cveTitle":"drm/virtio: use the DMA API for resource backing on Xen","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-16T01:07:43-07:00","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2026-98156","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98156","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Linux","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.8","temporalScore":"7.8","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","vectorStringSource":"Linux","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2026-98156","version":1,"revisionDate":"2026-10-16T01:07:43-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cc7edaf9-fdc8-f111-aaae-000d3a325eaf"}]},{"id":"00000000-0000-0000-0000-000025080388","releaseDate":"2026-10-16T01:07:37-07:00","cveNumber":"CVE-2026-94439","cveTitle":"HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-16T01:07:37-07:00","cweList":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"],"cweDetailsListForSearch":["cwe: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","cweUrl: https://cwe.mitre.org/data/definitions/444.html"],"mitreText":"CVE-2026-94439","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94439","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Go","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","vectorStringSource":"CISA ADP","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","https://cwe.mitre.org/data/definitions/444.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-94439","version":1,"revisionDate":"2026-10-16T01:07:37-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"b37edaf9-fdc8-f111-aaae-000d3a325eaf"}]},{"id":"00000000-0000-0000-0000-0000a6d96ba8","releaseDate":"2026-10-16T01:07:27-07:00","cveNumber":"CVE-2026-78667","cveTitle":"Lack of limit on size of parsed Range headers in net/http","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-16T01:07:27-07:00","cweList":["CWE-770: Allocation of Resources Without Limits or Throttling"],"cweDetailsListForSearch":["cwe: CWE-770: Allocation of Resources Without Limits or Throttling","cweUrl: https://cwe.mitre.org/data/definitions/770.html"],"mitreText":"CVE-2026-78667","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-78667","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"Go","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","baseScore":"7.5","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vectorStringSource":"CISA ADP","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-770: Allocation of Resources Without Limits or Throttling","https://cwe.mitre.org/data/definitions/770.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-78667","version":1,"revisionDate":"2026-10-16T01:07:27-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cfe8abf2-fdc8-f111-aaae-000d3a325eaf"}]},{"id":"00000000-0000-0000-0000-00005948c3e9","releaseDate":"2026-10-16T01:06:55-07:00","cveNumber":"CVE-2026-94200","cveTitle":"TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-16T01:06:55-07:00","cweList":["CWE-1288: Improper Validation of Consistency within Input"],"cweDetailsListForSearch":["cwe: CWE-1288: Improper Validation of Consistency within Input","cweUrl: https://cwe.mitre.org/data/definitions/1288.html"],"mitreText":"CVE-2026-94200","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94200","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"EEF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-1288: Improper Validation of Consistency within Input","https://cwe.mitre.org/data/definitions/1288.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-94200","version":1,"revisionDate":"2026-10-16T01:06:55-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"994f89da-fdc8-f111-aaae-000d3a325eaf"}]},{"id":"00000000-0000-0000-0000-0000e5f617d6","releaseDate":"2026-10-16T01:06:47-07:00","cveNumber":"CVE-2026-105236","cveTitle":"TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-16T01:06:47-07:00","cweList":["CWE-295: Improper Certificate Validation"],"cweDetailsListForSearch":["cwe: CWE-295: Improper Certificate Validation","cweUrl: https://cwe.mitre.org/data/definitions/295.html"],"mitreText":"CVE-2026-105236","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105236","latestSoftwareReleaseId":0,"olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Mariner","issuingCna":"EEF","issuingCnaId":100000002,"severityId":0,"impactId":0,"langCode":"en-US","isMariner":true,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-295: Improper Certificate Validation","https://cwe.mitre.org/data/definitions/295.html"]}],"articles":[],"revisions":[{"cveNumber":"CVE-2026-105236","version":1,"revisionDate":"2026-10-16T01:06:47-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"784f89da-fdc8-f111-aaae-000d3a325eaf"}]}],"@odata.nextLink":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/vulnerability?$orderBy=releaseDate%20desc&$top=5&$skip=5"}