Security Warnings — Source: msrc

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipse

2026-04-01 CVE-2024-41184

criticalMicrosoft MSRC 2026-W14

Incomplete fix for CVE-2024-1929

2026-04-01 CVE-2024-2746

highMicrosoft MSRC 2026-W14

Integer Overflow caused by divide by zero during S3 suspension

2026-04-01 CVE-2024-1298

mediumMicrosoft MSRC 2026-W14

interconnect: Don't access req_list while it's being manipulated

2026-04-01 CVE-2024-27005

mediumMicrosoft MSRC 2026-W14

Internet Explorer Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21326

highMicrosoft MSRC 2026-W14

io_uring: drop any code related to SCM_RIGHTS

2026-04-01 CVE-2023-52656

lowMicrosoft MSRC 2026-W14

io_uring: fix possible deadlock in io_register_iowq_max_workers()

2026-04-01 CVE-2024-41080

mediumMicrosoft MSRC 2026-W14

io_uring/io-wq: Use set_bit() and test_bit() at worker->flags

2026-04-01 CVE-2024-39508

mediumMicrosoft MSRC 2026-W14

io_uring/sqpoll: work around a potential audit memory leak

2026-04-01 CVE-2024-41001

mediumMicrosoft MSRC 2026-W14

iommu/vt-d: Use device rbtree in iopf reporting path

2026-04-01 CVE-2024-35843

mediumMicrosoft MSRC 2026-W14

ionic: fix kernel panic due to multi-buffer handling

2026-04-01 CVE-2024-42083

mediumMicrosoft MSRC 2026-W14

ionic: use dev_consume_skb_any outside of napi

2026-04-01 CVE-2024-42071

mediumMicrosoft MSRC 2026-W14

IP Helper Denial of Service Vulnerability

2026-04-01 CVE-2025-21231

highMicrosoft MSRC 2026-W14

iPerf3 before 3.17 when used with OpenSSL before 3.2.0 as a server with RSA authentication allows a timing side channel in RSA decryption operations. This side channel could be suf

2026-04-01 CVE-2024-26306

mediumMicrosoft MSRC 2026-W14

ipv4: check for NULL idev in ip_route_use_hint()

2026-04-01 CVE-2024-36008

mediumMicrosoft MSRC 2026-W14

ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()

2026-04-01 CVE-2024-36902

mediumMicrosoft MSRC 2026-W14

ipv6: prevent NULL dereference in ip6_output()

2026-04-01 CVE-2024-36901

mediumMicrosoft MSRC 2026-W14

ipv6: prevent possible NULL deref in fib6_nh_init()

2026-04-01 CVE-2024-40961

mediumMicrosoft MSRC 2026-W14

ipv6: prevent possible NULL dereference in rt6_probe()

2026-04-01 CVE-2024-40960

mediumMicrosoft MSRC 2026-W14

ipv6: sr: fix memleak in seg6_hmac_init_algo

2026-04-01 CVE-2024-39489

mediumMicrosoft MSRC 2026-W14

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firef

2026-04-01 CVE-2024-6608

mediumMicrosoft MSRC 2026-W14

jfs: xattr: fix buffer overflow for invalid xattr

2026-04-01 CVE-2024-40902

highMicrosoft MSRC 2026-W14

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

2026-04-01 CVE-2024-34064

mediumMicrosoft MSRC 2026-W14

kdb: Fix buffer overflow during tab-complete

2026-04-01 CVE-2024-39480

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38238

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38241

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38242

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38243

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38244

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38245

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38052

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38054

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38057

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38237

highMicrosoft MSRC 2026-W14

kprobes: Fix possible use-after-free issue on kprobe registration

2026-04-01 CVE-2024-35955

highMicrosoft MSRC 2026-W14

ksmbd: discard write access to the directory open

2026-04-01 CVE-2024-41030

mediumMicrosoft MSRC 2026-W14

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

2026-04-01 CVE-2024-26952

highMicrosoft MSRC 2026-W14

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

2026-04-01 CVE-2023-52755

highMicrosoft MSRC 2026-W14

ksmbd: unset the binding mark of a reused connection

2026-04-01 CVE-2024-46795

mediumMicrosoft MSRC 2026-W14

KVM: arm64: Disassociate vcpus from redistributor region on teardown

2026-04-01 CVE-2024-40989

mediumMicrosoft MSRC 2026-W14

KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()

2026-04-01 CVE-2024-41070

highMicrosoft MSRC 2026-W14

KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked

2026-04-01 CVE-2024-39483

mediumMicrosoft MSRC 2026-W14

KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status

2026-04-01 CVE-2024-26990

mediumMicrosoft MSRC 2026-W14

leds: an30259a: Use devm_mutex_init() for mutex initialization

2026-04-01 CVE-2024-42128

mediumMicrosoft MSRC 2026-W14

leds: mlxreg: Use devm_mutex_init() for mutex initialization

2026-04-01 CVE-2024-42129

mediumMicrosoft MSRC 2026-W14

leds: trigger: netdev: Fix kernel panic on interface rename trig notify

2026-04-01 CVE-2024-27063

mediumMicrosoft MSRC 2026-W14

lib/generic-radix-tree.c: Don't overflow in peek()

2026-04-01 CVE-2021-47432

mediumMicrosoft MSRC 2026-W14

libbpf: Use OPTS_SET() macro in bpf_xdp_query()

2026-04-01 CVE-2024-27050

mediumMicrosoft MSRC 2026-W14

Libndp: buffer overflow in route information length field

2026-04-01 CVE-2024-5564

highMicrosoft MSRC 2026-W14

Libopensc: incorrect handling length of buffers or files in libopensc

2026-04-01 CVE-2024-45619

mediumMicrosoft MSRC 2026-W14

Libvirt: stack use-after-free in virnetclientioeventloop()

2026-04-01 CVE-2024-4418

mediumMicrosoft MSRC 2026-W14

Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

2026-04-01 CVE-2024-32021

lowMicrosoft MSRC 2026-W14

Local Root Exploit via Configuration Dictionary

2026-04-01 CVE-2024-1929

highMicrosoft MSRC 2026-W14

mac802154: fix llsec key resources release in mac802154_llsec_key_del

2026-04-01 CVE-2024-26961

highMicrosoft MSRC 2026-W14

macidn punycode buffer overread

2026-04-01 CVE-2024-6874

mediumMicrosoft MSRC 2026-W14

Malformed DNS message can cause infinite loop in net

2026-04-01 CVE-2024-24788

mediumMicrosoft MSRC 2026-W14

maple_tree: fix mas_empty_area_rev() null pointer dereference

2026-04-01 CVE-2024-36891

mediumMicrosoft MSRC 2026-W14

MapUrlToZone Security Feature Bypass Vulnerability

2026-04-01 CVE-2025-21189

mediumMicrosoft MSRC 2026-W14

MapUrlToZone Security Feature Bypass Vulnerability

2026-04-01 CVE-2025-21219

mediumMicrosoft MSRC 2026-W14

MapUrlToZone Security Feature Bypass Vulnerability

2026-04-01 CVE-2025-21268

mediumMicrosoft MSRC 2026-W14