Security Warnings — Source: msrc

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

2026-03-31 CVE-2025-49178

mediumMicrosoft MSRC 2026-W14

Xorg: xwayland: use-after-free in xkb client resource removal

2026-03-31 CVE-2025-62230

highMicrosoft MSRC 2026-W14

xsk: Fix race condition in AF_XDP generic RX path

2026-03-31 CVE-2025-37920

mediumMicrosoft MSRC 2026-W14

yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.

2026-03-31 CVE-2024-22653

mediumMicrosoft MSRC 2026-W14

.NET Denial of Service Vulnerability

2026-03-10 CVE-2026-26127

highMicrosoft MSRC 2026-W11

.NET Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26131

highMicrosoft MSRC 2026-W11

A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass

2026-03-10 CVE-2026-3591

mediumMicrosoft MSRC 2026-W11

Active Directory Domain Services Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-25177

highMicrosoft MSRC 2026-W11

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsin

2026-03-10 CVE-2026-23865

mediumMicrosoft MSRC 2026-W11

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic f

2026-03-10 CVE-2025-69644

mediumMicrosoft MSRC 2026-W11

apparmor: fix unprivileged local user can do privileged policy management

2026-03-10 CVE-2026-23268

highMicrosoft MSRC 2026-W11

apparmor: validate DFA start states are in bounds in unpack_pdb

2026-03-10 CVE-2026-23269

highMicrosoft MSRC 2026-W11

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26117

highMicrosoft MSRC 2026-W11

ASP.NET Core Denial of Service Vulnerability

2026-03-10 CVE-2026-26130

highMicrosoft MSRC 2026-W11

audit: add fchmodat2() to change attributes class

2026-03-10 CVE-2025-71239

mediumMicrosoft MSRC 2026-W11

audit: add missing syscalls to read class

2026-03-10 CVE-2026-23241

mediumMicrosoft MSRC 2026-W11

Azure Cloud Shell Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-32169

criticalMicrosoft MSRC 2026-W11

Azure Data Factory Information Disclosure Vulnerability

2026-03-10 CVE-2026-23659

highMicrosoft MSRC 2026-W11

Azure DevOps: msazure Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23658

highMicrosoft MSRC 2026-W11

Azure IoT Explorer Information Disclosure Vulnerability

2026-03-10 CVE-2026-23661

highMicrosoft MSRC 2026-W11

Azure IoT Explorer Information Disclosure Vulnerability

2026-03-10 CVE-2026-23662

highMicrosoft MSRC 2026-W11

Azure IoT Explorer Information Disclosure Vulnerability

2026-03-10 CVE-2026-23664

highMicrosoft MSRC 2026-W11

Azure IOT Explorer Spoofing Vulnerability

2026-03-10 CVE-2026-26121

highMicrosoft MSRC 2026-W11

Azure MCP Server Tools Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26118

highMicrosoft MSRC 2026-W11

bad reuse of HTTP Negotiate connection

2026-03-10 CVE-2026-1965

mediumMicrosoft MSRC 2026-W11

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilat

2026-03-10 CVE-2025-69645

mediumMicrosoft MSRC 2026-W11

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rn

2026-03-10 CVE-2025-69646

mediumMicrosoft MSRC 2026-W11

bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing

2026-03-10 CVE-2026-23383

mediumMicrosoft MSRC 2026-W11

bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim

2026-03-10 CVE-2026-23319

mediumMicrosoft MSRC 2026-W11

bpf: Fix stack-out-of-bounds write in devmap

2026-03-10 CVE-2026-23359

highMicrosoft MSRC 2026-W11

brace-expansion: Zero-step sequence causes process hang and memory exhaustion

2026-03-10 CVE-2026-33750

mediumMicrosoft MSRC 2026-W11

Broadcast DVR Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23667

highMicrosoft MSRC 2026-W11

btrfs: do not free data reservation in fallback from inline due to -ENOSPC

2026-03-10 CVE-2025-71269

mediumMicrosoft MSRC 2026-W11

can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message

2026-03-10 CVE-2026-23307

mediumMicrosoft MSRC 2026-W11

can: ucan: Fix infinite loop from zero-length messages

2026-03-10 CVE-2026-23298

mediumMicrosoft MSRC 2026-W11

can: usb: etas_es58x: correctly anchor the urb in the read bulk callback

2026-03-10 CVE-2026-23324

mediumMicrosoft MSRC 2026-W11

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

2026-03-10 CVE-2026-3381

criticalMicrosoft MSRC 2026-W11

CoreDNS ACL Bypass

2026-03-10 CVE-2026-26017

highMicrosoft MSRC 2026-W11

CoreDNS Loop Detection Denial of Service Vulnerability

2026-03-10 CVE-2026-26018

highMicrosoft MSRC 2026-W11

cxl: Fix race of nvdimm_bus object when creating nvdimm objects

2026-03-10 CVE-2026-23348

mediumMicrosoft MSRC 2026-W11

espintcp: Fix race condition in espintcp_close()

2026-03-10 CVE-2026-23239

highMicrosoft MSRC 2026-W11

etcd: Nested etcd transactions bypass RBAC authorization checks

2026-03-10 CVE-2026-33343

mediumMicrosoft MSRC 2026-W11

f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes

2026-03-10 CVE-2026-23267

highMicrosoft MSRC 2026-W11

f2fs: fix out-of-bounds access in sysfs attribute read/write

2026-03-10 CVE-2026-23235

highMicrosoft MSRC 2026-W11

f2fs: fix to avoid mapping wrong physical block for swapfile

2026-03-10 CVE-2026-23233

highMicrosoft MSRC 2026-W11

f2fs: fix to avoid UAF in f2fs_write_end_io()

2026-03-10 CVE-2026-23234

highMicrosoft MSRC 2026-W11

f2fs: fix to do sanity check on node footer in {read,write}_end_io

2026-03-10 CVE-2026-23265

highMicrosoft MSRC 2026-W11

fbdev: rivafb: fix divide error in nv3_arb()

2026-03-10 CVE-2026-23266

mediumMicrosoft MSRC 2026-W11

fbdev: smscufx: properly copy ioctl memory to kernelspace

2026-03-10 CVE-2026-23236

mediumMicrosoft MSRC 2026-W11

FileInfo can escape from a Root in os

2026-03-10 CVE-2026-27139

lowMicrosoft MSRC 2026-W11

FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

2026-03-10 CVE-2026-5107

mediumMicrosoft MSRC 2026-W11

fs: ntfs3: check return value of indx_find to avoid infinite loop

2026-03-10 CVE-2025-71266

mediumMicrosoft MSRC 2026-W11

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

2026-03-10 CVE-2025-71265

mediumMicrosoft MSRC 2026-W11

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

2026-03-10 CVE-2025-71267

mediumMicrosoft MSRC 2026-W11

GDI+ Information Disclosure Vulnerability

2026-03-10 CVE-2026-25181

highMicrosoft MSRC 2026-W11

gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

2026-03-10 CVE-2026-4437

mediumMicrosoft MSRC 2026-W11

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

2026-03-10 CVE-2026-4438

mediumMicrosoft MSRC 2026-W11

Git for Windows leaks NTLM hash when cloning from an attacker-controlled server

2026-03-10 CVE-2025-66413

highMicrosoft MSRC 2026-W11

GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

2026-03-10 CVE-2026-26030

criticalMicrosoft MSRC 2026-W11

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

2026-03-10 CVE-2026-23654

highMicrosoft MSRC 2026-W11