Source: msrc

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

2026-04-02 CVE-2026-39314

Heap Buffer Overflow in Hexadecimal Conversion

2026-04-02 CVE-2026-31789

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

2026-04-02 CVE-2026-31790

Inefficient policy validation in crypto/x509

2026-04-02 CVE-2026-32281

ipv6: add NULL checks for idev in SRv6 paths

2026-04-02 CVE-2026-23442

JsBraceDepth Context Tracking Bugs (XSS) in html/template

2026-04-02 CVE-2026-32289

ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

2026-04-02 CVE-2026-31410

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

2026-04-02 CVE-2026-23401

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

2026-04-02 CVE-2026-4878

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

2026-04-02 CVE-2026-35093

Mariner

2026-04-02 CVE-2026-35385

Mariner

2026-04-02 CVE-2026-35387

Mariner

2026-04-02 CVE-2026-35388

Mariner

2026-04-02 CVE-2026-35535

Mariner

2026-04-02 CVE-2026-35549

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33105

criticalMicrosoft MSRC 2026-W14

Microsoft Bing Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32186

criticalMicrosoft MSRC 2026-W14

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-02 CVE-2026-33119

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2026-04-02 CVE-2026-33118

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

2026-04-02 CVE-2026-27144

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

2026-04-02 CVE-2026-27143

criticalMicrosoft MSRC 2026-W14

netfilter: conntrack: add missing netlink policy validations

2026-04-02 CVE-2026-31407

NULL Pointer Dereference When Processing a Delta CRL

2026-04-02 CVE-2026-28388

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

2026-04-02 CVE-2026-34446

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

2026-04-02 CVE-2026-34445

OpenPrinting CUPS: Heap overflow in `get_options()`

2026-04-02 CVE-2026-34979

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

2026-04-02 CVE-2026-29181

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

2026-04-02 CVE-2026-39882

Path traversal issue with zip.vim in Vim

2026-04-02 CVE-2026-35177

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

2026-04-02 CVE-2026-28389

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

2026-04-02 CVE-2026-28390

Potential Use-after-free in DANE Client Code

2026-04-02 CVE-2026-28387

serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

2026-04-02 CVE-2026-23472

Sleuth Kit APFS Keybag Parser Out-of-Bounds Read

2026-04-02 CVE-2026-40025

Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read

2026-04-02 CVE-2026-40026

Sleuth Kit tsk_recover Path Traversal

2026-04-02 CVE-2026-40024

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

2026-04-02 CVE-2026-32282

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

2026-04-02 CVE-2026-32283

Unbounded allocation for old GNU sparse in archive/tar

2026-04-02 CVE-2026-32288

Unexpected work during chain building in crypto/x509

2026-04-02 CVE-2026-32280

util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

2026-04-02 CVE-2026-27456

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

2026-04-02 CVE-2026-3184

Vim Ex command injection in Vims NetBeans integration

2026-04-02 CVE-2026-39881

Vim modeline bypass via various options affects Vim < 9.2.0276

2026-04-02 CVE-2026-34982

wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

2026-04-02 CVE-2026-23444

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

2026-04-02 CVE-2026-34601

.NET and Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-38095

.NET and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21172

.NET Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21173

.NET Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21171

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38081

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21176

A flood of DNS messages over TCP may make the server unstable

2026-04-01 CVE-2024-0760

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "was

2026-04-01 CVE-2024-34250