Security Warnings — Source: msrc

virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN

2026-03-31 CVE-2025-38048

lowMicrosoft MSRC 2026-W14

virtio: break and reset virtio devices on device_shutdown()

2026-03-31 CVE-2025-38064

mediumMicrosoft MSRC 2026-W14

virtiofs: add filesystem context source name check

2026-03-31 CVE-2025-37773

mediumMicrosoft MSRC 2026-W14

Virtual Secure Mode Spoofing Vulnerability

2026-03-31 CVE-2025-48813

mediumMicrosoft MSRC 2026-W14

Visual Studio Code Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-21264

highMicrosoft MSRC 2026-W14

Visual Studio Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55240

highMicrosoft MSRC 2026-W14

Visual Studio Information Disclosure Vulnerability

2026-03-31 CVE-2025-32703

mediumMicrosoft MSRC 2026-W14

Visual Studio Remote Code Execution Vulnerability

2026-03-31 CVE-2025-32702

highMicrosoft MSRC 2026-W14

Visual Studio Remote Code Execution Vulnerability

2026-03-31 CVE-2025-47959

highMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2026-03-31 CVE-2025-53044

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2026-03-31 CVE-2025-53045

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2026-03-31 CVE-2025-53054

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2026-03-31 CVE-2025-53062

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4

2026-03-31 CVE-2025-53069

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily explo

2026-03-31 CVE-2025-53053

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2026-03-31 CVE-2025-53040

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2026-03-31 CVE-2025-53042

mediumMicrosoft MSRC 2026-W14

vxlan: Annotate FDB data races

2026-03-31 CVE-2025-38037

lowMicrosoft MSRC 2026-W14

vxlan: vnifilter: Fix unlocked deletion of default FDB entry

2026-03-31 CVE-2025-37921

highMicrosoft MSRC 2026-W14

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

2026-03-31 CVE-2025-29971

highMicrosoft MSRC 2026-W14

webpack-dev-server users' source code may be stolen when they access a malicious web site

2026-03-31 CVE-2025-30359

mediumMicrosoft MSRC 2026-W14

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

2026-03-31 CVE-2025-30360

mediumMicrosoft MSRC 2026-W14

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform e

2026-03-31 CVE-2024-6174

highMicrosoft MSRC 2026-W14

wifi: at76c50x: fix use after free access in at76_disconnect

2026-03-31 CVE-2025-37796

mediumMicrosoft MSRC 2026-W14

wifi: ath12k: Avoid memory leak while enabling statistics

2026-03-31 CVE-2025-37743

mediumMicrosoft MSRC 2026-W14

wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi

2026-03-31 CVE-2025-37943

highMicrosoft MSRC 2026-W14

wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process

2026-03-31 CVE-2025-37944

highMicrosoft MSRC 2026-W14

wifi: ath12k: fix memory leak in ath12k_pci_remove()

2026-03-31 CVE-2025-37744

mediumMicrosoft MSRC 2026-W14

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

2026-03-31 CVE-2025-37990

mediumMicrosoft MSRC 2026-W14

wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

2026-03-31 CVE-2025-37973

mediumMicrosoft MSRC 2026-W14

wifi: iwlwifi: fix debug actions order

2026-03-31 CVE-2025-38045

mediumMicrosoft MSRC 2026-W14

wifi: mac80211: increase scan_ies_len for S1G

2026-03-31 CVE-2025-39957

mediumMicrosoft MSRC 2026-W14

wifi: mac80211: Purge vif txq in ieee80211_do_stop()

2026-03-31 CVE-2025-37794

mediumMicrosoft MSRC 2026-W14

wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit

2026-03-31 CVE-2023-53466

mediumMicrosoft MSRC 2026-W14

wifi: mwifiex: Initialize the chan_stats array to zero

2026-03-31 CVE-2025-39891

mediumMicrosoft MSRC 2026-W14

wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release

2026-03-31 CVE-2025-37897

highMicrosoft MSRC 2026-W14

wifi: rtw88: fix memory leak in rtw_usb_probe()

2026-03-31 CVE-2023-53460

mediumMicrosoft MSRC 2026-W14

wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()

2026-03-31 CVE-2025-40000

criticalMicrosoft MSRC 2026-W14

wifi: wilc1000: avoid buffer overflow in WID string configuration

2026-03-31 CVE-2025-39952

highMicrosoft MSRC 2026-W14

wifi: wl1251: fix memory leak in wl1251_tx_work

2026-03-31 CVE-2025-37982

highMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-32712

highMicrosoft MSRC 2026-W14

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

2026-03-31 CVE-2025-59258

mediumMicrosoft MSRC 2026-W14

Windows Agere Modem Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-24052

highMicrosoft MSRC 2026-W14

Windows Agere Modem Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-24990

highMicrosoft MSRC 2026-W14

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-32709

highMicrosoft MSRC 2026-W14

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-58714

highMicrosoft MSRC 2026-W14

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59242

highMicrosoft MSRC 2026-W14

Windows App Control for Business Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-33069

mediumMicrosoft MSRC 2026-W14

Windows Authentication Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55701

highMicrosoft MSRC 2026-W14

Windows Authentication Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59275

highMicrosoft MSRC 2026-W14

Windows Authentication Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59277

highMicrosoft MSRC 2026-W14

Windows Authentication Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59278

highMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55330

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55332

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55333

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55337

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55338

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-55682

mediumMicrosoft MSRC 2026-W14

Windows Bluetooth Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-58728

highMicrosoft MSRC 2026-W14

Windows Bluetooth Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59289

highMicrosoft MSRC 2026-W14