Security Warnings — Vendor: microsoft

virtio-pci: Check if is_avq is NULL

2026-04-01 CVE-2024-42134

mediumMicrosoft MSRC 2026-W14

virtio: packed: fix unmap leak for indirect desc table

2026-04-01 CVE-2024-27066

mediumMicrosoft MSRC 2026-W14

Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-30046

mediumMicrosoft MSRC 2026-W14

Visual Studio Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21405

highMicrosoft MSRC 2026-W14

Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21178

highMicrosoft MSRC 2026-W14

Vitess vulnerable to infinite memory consumption and vtgate crash

2026-04-01 CVE-2024-32886

mediumMicrosoft MSRC 2026-W14

vt: fix unicode buffer corruption when deleting characters

2026-04-01 CVE-2024-35823

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit v

2026-04-01 CVE-2024-21166

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21159

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21160

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21157

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-20996

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21173

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. E

2026-04-01 CVE-2024-21134

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21127

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21129

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21125

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily expl

2026-04-01 CVE-2024-21135

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21130

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21162

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21163

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21171

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnera

2026-04-01 CVE-2024-21165

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior.

2026-04-01 CVE-2024-21142

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulner

2026-04-01 CVE-2024-21176

mediumMicrosoft MSRC 2026-W14

watchdog: Fix possible use-after-free in wdt_startup()

2026-04-01 CVE-2021-47324

highMicrosoft MSRC 2026-W14

watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

2026-04-01 CVE-2021-47323

highMicrosoft MSRC 2026-W14

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

2026-04-01 CVE-2024-34069

highMicrosoft MSRC 2026-W14

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This

2026-04-01 CVE-2024-4773

highMicrosoft MSRC 2026-W14

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunder

2026-04-01 CVE-2024-4770

highMicrosoft MSRC 2026-W14

wifi: ath12k: fix kernel crash during resume

2026-04-01 CVE-2024-40979

mediumMicrosoft MSRC 2026-W14

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

2026-04-01 CVE-2023-52827

highMicrosoft MSRC 2026-W14

wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

2026-04-01 CVE-2024-42114

mediumMicrosoft MSRC 2026-W14

wifi: iwlwifi: mvm: ensure offloading TID queue exists

2026-04-01 CVE-2024-27056

mediumMicrosoft MSRC 2026-W14

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

2026-04-01 CVE-2024-36921

highMicrosoft MSRC 2026-W14

wifi: iwlwifi: read txq->read_ptr under lock

2026-04-01 CVE-2024-36922

mediumMicrosoft MSRC 2026-W14

wifi: mt76: mt7921s: fix potential hung tasks during chip recovery

2026-04-01 CVE-2024-40977

mediumMicrosoft MSRC 2026-W14

wifi: mt76: replace skb_put with skb_put_zero

2026-04-01 CVE-2024-42225

highMicrosoft MSRC 2026-W14

wifi: wilc1000: fix RCU usage in connect path

2026-04-01 CVE-2024-27053

criticalMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30028

highMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30030

highMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30038

highMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38059

highMicrosoft MSRC 2026-W14

Win32k Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38246

highMicrosoft MSRC 2026-W14

Windows App Package Installer Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21275

highMicrosoft MSRC 2026-W14

Windows Authentication Information Disclosure Vulnerability

2026-04-01 CVE-2024-38254

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Information Disclosure Vulnerability

2026-04-01 CVE-2025-21210

mediumMicrosoft MSRC 2026-W14

Windows BitLocker Information Disclosure Vulnerability

2026-04-01 CVE-2025-21214

mediumMicrosoft MSRC 2026-W14

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21271

highMicrosoft MSRC 2026-W14

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

2026-04-01 CVE-2024-30034

mediumMicrosoft MSRC 2026-W14

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30031

highMicrosoft MSRC 2026-W14

Windows COM Server Information Disclosure Vulnerability

2026-04-01 CVE-2025-21272

mediumMicrosoft MSRC 2026-W14

Windows COM Server Information Disclosure Vulnerability

2026-04-01 CVE-2025-21288

mediumMicrosoft MSRC 2026-W14

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-29996

highMicrosoft MSRC 2026-W14

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30025

highMicrosoft MSRC 2026-W14

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-30037

mediumMicrosoft MSRC 2026-W14

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

2026-04-01 CVE-2025-21207

highMicrosoft MSRC 2026-W14

Windows Cryptographic Information Disclosure Vulnerability

2026-04-01 CVE-2025-21336

mediumMicrosoft MSRC 2026-W14

Windows Cryptographic Services Information Disclosure Vulnerability

2026-04-01 CVE-2024-30016

mediumMicrosoft MSRC 2026-W14

Windows Cryptographic Services Remote Code Execution Vulnerability

2026-04-01 CVE-2024-30020

highMicrosoft MSRC 2026-W14