Articles from May 2026
Browse all Windows news articles published in May 2026
CVE-2026-46158 MPTCP Leak: Windows Teams Urged to Audit Kernel Code
A newly published Linux kernel vulnerability, tracked as CVE-2026-46158, reveals a subtle reference-count leak in the Multipath TCP (MPTCP) subsystem’s path-manager module when cleaning up socket...
Freescale SPI Use-After-Free Fixed as NVD Scoring Delays Persist
Linux kernel maintainers published CVE-2026-46226 on May 28, 2026, patching a subtle but serious bug in the Freescale SPI driver. The flaw, lurking in the driver’s unbind path for years, could...
CVE-2026-46159: Btrfs Race Condition Leaks Kernel Heap Data to Local Users
The National Vulnerability Database published CVE-2026-46159 on May 28, 2026, detailing a kernel information leak in the Btrfs filesystem driver that allows local attackers to read uninitialized heap...
Linux stmmac NULL Dereference CVE-2026-46110: Critical Fix for Embedded Drivers
A newly disclosed Linux kernel vulnerability tracked as CVE-2026-46110 patches a critical NULL-pointer dereference in the stmmac Ethernet driver, a core component in countless embedded systems and...
CVE-2026-46131: Critical Linux KVM Nested VM Bug Risks Data Leakage
A critical vulnerability in the Linux kernel's Kernel-based Virtual Machine (KVM) hypervisor was publicly disclosed on May 28, 2026, under CVE-2026-46131. The flaw, which involves improper management...
Cactus Life Sciences Deploys 30+ Custom AI Agents With Microsoft 365 Copilot
Cactus Life Sciences, a global medical communications agency, has rolled out more than 30 custom AI agents integrated with Microsoft 365 Copilot, achieving dramatic speed-ups in clinical data...
CVE-2026-46163: Why a 17-Year-Old Linux Wi-Fi Driver Patch Matters for Windows Users Too
The Linux kernel project released a fix for an out-of-bounds read vulnerability in the b43legacy Broadcom Wi‑Fi driver on May 28, 2026. Tracked as CVE-2026-46163, the flaw earned a CVSS 3.1 base...
CVE-2026-46168: Critical Linux Kernel MPTCP Flaw Triggers Kernel Panic – Are Your Windows WSL2 Systems at Risk?
A newly disclosed Linux kernel vulnerability, CVE-2026-46168, can cause an immediate system crash via a kernel panic when specially crafted Multipath TCP (MPTCP) traffic is processed. Published by...
CVE-2026-46172: Patch Linux IPv6 XFRM Leak Now, No CVSS Score
CVE-2026-46172, a newly published Linux kernel vulnerability, exposes a reference leak in the IPv6 XFRM receive path. The flaw, added to the National Vulnerability Database on May 28, 2026, stems...
CVE-2026-46186: Virtio Bluetooth Header-Length Flaw Exposes Windows Guests to Attacks
The Linux kernel project disclosed a critical vulnerability on May 28, 2026, tracked as CVE-2026-46186, in the virtio Bluetooth driver. The flaw, stemming from improper header-length validation in...
CVE-2026-46137: Unpatched Linux MPTCP bug threatens WSL, Docker containers on Windows
A critical race condition in the Linux kernel’s Multipath TCP (MPTCP) subsystem landed on the National Vulnerability Database on May 28, 2026. Dubbed CVE-2026-46137, the flaw lives in the...
CVE-2026-46219: Linux Kernel MPC52xx SPI Driver Use-After-Free Vulnerability — Patch, Impact, and Mitigation
The National Vulnerability Database published CVE-2026-46219 on May 28, 2026, disclosing a critical use-after-free vulnerability in the Linux kernel's driver for the Freescale MPC52xx SPI controller....