Vendor: microsoft

arm64: io: Extract user memory type in ioremap_prot()

2026-04-06 CVE-2026-23346

mediumMicrosoft CVE 2026-W15

atm: lec: fix null-ptr-deref in lec_arp_clear_vccs

2026-04-06 CVE-2026-23286

bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded

2026-04-06 CVE-2026-23310

can: mcp251x: fix deadlock in error path of mcp251x_open

2026-04-06 CVE-2026-23357

can: usb: f81604: correctly anchor the urb in the read bulk callback

2026-04-06 CVE-2026-23347

can: usb: f81604: handle short interrupt urb messages properly

2026-04-06 CVE-2026-23334

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

2026-04-06 CVE-2026-23327

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-04-06 CVE-2026-23356

drbd: fix null-pointer dereference on local read error

2026-04-06 CVE-2026-23285

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

2026-04-06 CVE-2026-23468

mediumMicrosoft CVE 2026-W15

drm/vmwgfx: Return the correct value in vmw_translate_ptr functions

2026-04-06 CVE-2026-23317

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

2026-04-06 CVE-2026-1519

IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

2026-04-06 CVE-2026-23289

ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()

2026-04-06 CVE-2026-23304

irqchip/sifive-plic: Fix frozen interrupt due to affinity setting

2026-04-06 CVE-2026-23287

ksmbd: Compare MACs in constant time

2026-04-06 CVE-2026-23364

Libssh: buffer underflow in ssh_get_hexa() on invalid input

2026-04-06 CVE-2026-0966

Libssh: improper sanitation of paths received from scp servers

2026-04-06 CVE-2026-0964

Libssh: libssh: denial of service due to malformed sftp message

2026-04-06 CVE-2026-0968

Libssh: libssh: denial of service via inefficient regular expression processing

2026-04-06 CVE-2026-0967

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

2026-04-06 CVE-2026-31394

mediumMicrosoft CVE 2026-W15

Mariner

2026-04-06 CVE-2025-69720

criticalMicrosoft MSRC 2026-W15

Mariner

2026-04-06 CVE-2026-21710

Mariner

2026-04-06 CVE-2026-21711

Mariner

2026-04-06 CVE-2026-21713

Mariner

2026-04-06 CVE-2026-21716

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-06 CVE-2026-0385

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-04-06 CVE-2026-23302

net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

2026-04-06 CVE-2026-23368

net: usb: kaweth: validate USB endpoints

2026-04-06 CVE-2026-23312

net: usb: pegasus: validate USB endpoints

2026-04-06 CVE-2026-23290

net/sched: ets: fix divide by zero in the offload path

2026-04-06 CVE-2026-23379

nfc: nci: complete pending data exchange on device close

2026-04-06 CVE-2026-23330

nfc: nci: free skb on nci_transceive early error paths

2026-04-06 CVE-2026-23339

nfc: pn533: properly drop the usb interface reference on disconnect

2026-04-06 CVE-2026-23291

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

2026-04-06 CVE-2025-66038

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

2026-04-06 CVE-2025-66215

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

2026-04-06 CVE-2025-49010

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters

2026-04-06 CVE-2026-2100

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

2026-04-06 CVE-2026-23361

pinctrl: equilibrium: fix warning trace on load

2026-04-06 CVE-2026-23308

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

2026-04-06 CVE-2026-23370

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

2026-04-06 CVE-2026-23335

scsi: core: Fix refcount leak for tagset_refcnt

2026-04-06 CVE-2026-23296

scsi: target: Fix recursive locking in __configfs_open_file()

2026-04-06 CVE-2026-23292

smb: client: Don't log plaintext credentials in cifs_set_cifscreds

2026-04-06 CVE-2026-23303

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

2026-04-06 CVE-2026-23336

wifi: libertas: fix use-after-free in lbs_free_adapter()

2026-04-06 CVE-2026-23281

wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()

2026-04-06 CVE-2026-23279

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

2026-04-06 CVE-2026-23315

wifi: radiotap: reject radiotap with unknown bits

2026-04-06 CVE-2026-23367

io_uring/poll: fix multishot recv missing EOF on wakeup race

2026-04-03 CVE-2026-23473

Mariner

2026-04-03 CVE-2026-35386

lowMicrosoft CVE 2026-W14

netfilter: nft_set_rbtree: validate open interval overlap

2026-04-03 CVE-2026-23333

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

2026-04-03 CVE-2026-27447

OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

2026-04-03 CVE-2026-34978

usb: gadget: f_ncm: align net_device lifecycle with bind/unbind

2026-04-03 CVE-2026-23320