Security Warnings — Source: msrc

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transform

2025-03-11 CVE-2023-52970

mediumMicrosoft MSRC 2025-W11

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_

2025-03-11 CVE-2023-52969

mediumMicrosoft MSRC 2025-W11

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, pot

2025-03-11 CVE-2025-27810

mediumMicrosoft MSRC 2025-W11

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbe

2025-03-11 CVE-2025-27809

mediumMicrosoft MSRC 2025-W11

Memory Exhaustion in Expr Parser with Unrestricted Input

2025-03-11 CVE-2025-29786

highMicrosoft MSRC 2025-W11

Microsoft Access Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26630

highMicrosoft MSRC 2025-W11

Microsoft Dataverse Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24053

highMicrosoft MSRC 2025-W11

Microsoft Dataverse Remote Code Execution Vulnerability

2025-03-11 CVE-2025-29807

highMicrosoft MSRC 2025-W11

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

2025-03-11 CVE-2025-29806

mediumMicrosoft MSRC 2025-W11

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2025-03-11 CVE-2025-26643

mediumMicrosoft MSRC 2025-W11

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-29795

highMicrosoft MSRC 2025-W11

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24075

highMicrosoft MSRC 2025-W11

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24081

highMicrosoft MSRC 2025-W11

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24082

highMicrosoft MSRC 2025-W11

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24072

highMicrosoft MSRC 2025-W11

Microsoft Management Console Security Feature Bypass Vulnerability

2025-03-11 CVE-2025-26633

highMicrosoft MSRC 2025-W11

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24057

highMicrosoft MSRC 2025-W11

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24080

highMicrosoft MSRC 2025-W11

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24083

highMicrosoft MSRC 2025-W11

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26629

highMicrosoft MSRC 2025-W11

Microsoft Partner Center Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-29814

criticalMicrosoft MSRC 2025-W11

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24076

highMicrosoft MSRC 2025-W11

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24994

highMicrosoft MSRC 2025-W11

Microsoft Windows File Explorer Spoofing Vulnerability

2025-03-11 CVE-2025-24071

mediumMicrosoft MSRC 2025-W11

Microsoft Word Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24077

highMicrosoft MSRC 2025-W11

Microsoft Word Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24078

highMicrosoft MSRC 2025-W11

Microsoft Word Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24079

highMicrosoft MSRC 2025-W11

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

2025-03-11 CVE-2023-52939

mediumMicrosoft MSRC 2025-W11

mm/khugepaged: fix ->anon_vma race

2025-03-11 CVE-2023-52935

highMicrosoft MSRC 2025-W11

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

2025-03-11 CVE-2025-21861

mediumMicrosoft MSRC 2025-W11

net: allow small head cache usage with large MAX_SKB_FRAGS values

2025-03-11 CVE-2025-21868

mediumMicrosoft MSRC 2025-W11

net: better track kernel sockets lifetime

2025-03-11 CVE-2025-21884

mediumMicrosoft MSRC 2025-W11

net/sched: cls_api: fix error handling causing NULL dereference

2025-03-11 CVE-2025-21857

mediumMicrosoft MSRC 2025-W11

netfilter: allow exp not to be removed in nf_ct_find_expectation

2025-03-11 CVE-2023-52927

mediumMicrosoft MSRC 2025-W11

Network restriction bypass via race condition during namespace termination

2025-03-11 CVE-2024-7598

lowMicrosoft MSRC 2025-W11

nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

2025-03-11 CVE-2025-21848

mediumMicrosoft MSRC 2025-W11

NTLM Hash Disclosure Spoofing Vulnerability

2025-03-11 CVE-2025-24054

mediumMicrosoft MSRC 2025-W11

NTLM Hash Disclosure Spoofing Vulnerability

2025-03-11 CVE-2025-24996

mediumMicrosoft MSRC 2025-W11

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

2025-03-11 CVE-2024-48615

highMicrosoft MSRC 2025-W11

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumbe

2025-03-11 CVE-2025-24855

highMicrosoft MSRC 2025-W11

ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

2025-03-11 CVE-2025-21887

highMicrosoft MSRC 2025-W11

PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1

2025-03-11 CVE-2025-21831

mediumMicrosoft MSRC 2025-W11

Possible SSRF and Credential Leakage via Absolute URL in axios Requests

2025-03-11 CVE-2025-27152

highMicrosoft MSRC 2025-W11

Potential iSCSI R2T PDU Vulnerability

2025-03-11 CVE-2025-2295

lowMicrosoft MSRC 2025-W11

powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC

2025-03-11 CVE-2025-21866

mediumMicrosoft MSRC 2025-W11

PyTorch torch.lstm_cell memory corruption

2025-03-11 CVE-2025-3001

mediumMicrosoft MSRC 2025-W11

PyTorch torch.mkldnn_max_pool2d denial of service

2025-03-11 CVE-2025-2953

lowMicrosoft MSRC 2025-W11

PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

2025-03-11 CVE-2025-2998

mediumMicrosoft MSRC 2025-W11

RabbitMQ has XSS Vulnerability in an Error Message in Management UI

2025-03-11 CVE-2025-30219

mediumMicrosoft MSRC 2025-W11

RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers

2025-03-11 CVE-2025-21885

mediumMicrosoft MSRC 2025-W11

RDMA/mlx5: Fix a WARN during dereg_mr for DM type

2025-03-11 CVE-2025-21888

mediumMicrosoft MSRC 2025-W11

RDMA/mlx5: Fix the recovery flow of the UMR QP

2025-03-11 CVE-2025-21892

mediumMicrosoft MSRC 2025-W11

Remote Desktop Client Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26645

highMicrosoft MSRC 2025-W11

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

2025-03-11 CVE-2024-58069

highMicrosoft MSRC 2025-W11

rxrpc: Fix handling of received connection abort

2025-03-11 CVE-2024-58053

mediumMicrosoft MSRC 2025-W11

s390/ism: add release function for struct device

2025-03-11 CVE-2025-21856

highMicrosoft MSRC 2025-W11

smb: client: Add check for next_buffer in receive_encrypted_standard()

2025-03-11 CVE-2025-21844

mediumMicrosoft MSRC 2025-W11

sockmap, vsock: For connectible sockets allow only connected

2025-03-11 CVE-2025-21854

mediumMicrosoft MSRC 2025-W11

squashfs: harden sanity check in squashfs_read_xattr_id_table

2025-03-11 CVE-2023-52979

mediumMicrosoft MSRC 2025-W11

Stream HTTP wrapper header check might omit basic auth header

2025-03-11 CVE-2025-1736

highMicrosoft MSRC 2025-W11