Vulnerabilities

CVSS

9.0 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Risk score

72.0

Published

2026-05-07

Status

Modified

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Weaknesses

CWE-20

Coverage 1

vulnerability

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

Microsoft released its May 2026 Patch Tuesday update, addressing 137 vulnerabilities across its product suite. The update includes a significant number of critical vulnerabilities, primarily remote code execution (RCE) f…

Cisco Talos · May 12, 2026 High

CVE-2026-32161CVE-2026-33109CVE-2026-33844rcebuffer overflowuse after free

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33844