Security Warnings — Vendor: microsoft

apparmor: Fix double free of ns_name in aa_replace_profiles()

2026-04-02 CVE-2026-23408

highMicrosoft MSRC 2026-W14

apparmor: fix memory leak in verify_header

2026-04-02 CVE-2026-23403

mediumMicrosoft MSRC 2026-W14

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

2026-04-02 CVE-2026-23407

highMicrosoft MSRC 2026-W14

apparmor: fix race between freeing data and fs accessing it

2026-04-02 CVE-2026-23411

highMicrosoft MSRC 2026-W14

apparmor: fix race on rawdata dereference

2026-04-02 CVE-2026-23410

highMicrosoft MSRC 2026-W14

apparmor: fix side-effect bug in match_char() macro usage

2026-04-02 CVE-2026-23406

highMicrosoft MSRC 2026-W14

apparmor: fix: limit the number of levels of policy namespaces

2026-04-02 CVE-2026-23405

mediumMicrosoft MSRC 2026-W14

apparmor: replace recursive profile removal with iterative approach

2026-04-02 CVE-2026-23404

mediumMicrosoft MSRC 2026-W14

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

2026-04-02 CVE-2026-34933

mediumMicrosoft MSRC 2026-W14

Azure AI Foundry Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32213

criticalMicrosoft MSRC 2026-W14

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-26135

criticalMicrosoft MSRC 2026-W14

Azure Databricks Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33107

criticalMicrosoft MSRC 2026-W14

Azure MCP Server Information Disclosure Vulnerability

2026-04-02 CVE-2026-32211

criticalMicrosoft MSRC 2026-W14

Azure SRE Agent Information Disclosure Vulnerability

2026-04-02 CVE-2026-32173

highMicrosoft MSRC 2026-W14

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

2026-04-02 CVE-2026-31408

highMicrosoft MSRC 2026-W14

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

2026-04-02 CVE-2026-33810

mediumMicrosoft MSRC 2026-W14

Code execution vulnerability in SWIG code generation in cmd/go

2026-04-02 CVE-2026-27140

criticalMicrosoft MSRC 2026-W14

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

2026-04-02 CVE-2026-39316

mediumMicrosoft MSRC 2026-W14

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

2026-04-02 CVE-2026-39314

mediumMicrosoft MSRC 2026-W14

Heap Buffer Overflow in Hexadecimal Conversion

2026-04-02 CVE-2026-31789

mediumMicrosoft MSRC 2026-W14

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

2026-04-02 CVE-2026-31790

mediumMicrosoft MSRC 2026-W14

Inefficient policy validation in crypto/x509

2026-04-02 CVE-2026-32281

mediumMicrosoft MSRC 2026-W14

ipv6: add NULL checks for idev in SRv6 paths

2026-04-02 CVE-2026-23442

mediumMicrosoft MSRC 2026-W14

JsBraceDepth Context Tracking Bugs (XSS) in html/template

2026-04-02 CVE-2026-32289

mediumMicrosoft MSRC 2026-W14

ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

2026-04-02 CVE-2026-31410

mediumMicrosoft MSRC 2026-W14

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

2026-04-02 CVE-2026-23401

highMicrosoft MSRC 2026-W14

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

2026-04-02 CVE-2026-4878

mediumMicrosoft MSRC 2026-W14

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

2026-04-02 CVE-2026-35093

highMicrosoft MSRC 2026-W14

Mariner

2026-04-02 CVE-2026-35385

highMicrosoft MSRC 2026-W14

Mariner

2026-04-02 CVE-2026-35387

lowMicrosoft MSRC 2026-W14

Mariner

2026-04-02 CVE-2026-35388

lowMicrosoft MSRC 2026-W14

Mariner

2026-04-02 CVE-2026-35414

mediumMicrosoft CVE 2026-W14

Mariner

2026-04-02 CVE-2026-35535

highMicrosoft MSRC 2026-W14

Mariner

2026-04-02 CVE-2026-35549

mediumMicrosoft MSRC 2026-W14

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33105

criticalMicrosoft MSRC 2026-W14

Microsoft Bing Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32186

criticalMicrosoft MSRC 2026-W14

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-02 CVE-2026-33119

mediumMicrosoft MSRC 2026-W14

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2026-04-02 CVE-2026-33118

mediumMicrosoft MSRC 2026-W14

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

2026-04-02 CVE-2026-27144

highMicrosoft MSRC 2026-W14

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

2026-04-02 CVE-2026-27143

criticalMicrosoft MSRC 2026-W14

netfilter: conntrack: add missing netlink policy validations

2026-04-02 CVE-2026-31407

highMicrosoft MSRC 2026-W14

NULL Pointer Dereference When Processing a Delta CRL

2026-04-02 CVE-2026-28388

mediumMicrosoft MSRC 2026-W14

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

2026-04-02 CVE-2026-34446

mediumMicrosoft MSRC 2026-W14

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

2026-04-02 CVE-2026-34445

highMicrosoft MSRC 2026-W14

OpenPrinting CUPS: Heap overflow in `get_options()`

2026-04-02 CVE-2026-34979

mediumMicrosoft MSRC 2026-W14

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

2026-04-02 CVE-2026-29181

highMicrosoft MSRC 2026-W14

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

2026-04-02 CVE-2026-39882

mediumMicrosoft MSRC 2026-W14

Path traversal issue with zip.vim in Vim

2026-04-02 CVE-2026-35177

mediumMicrosoft MSRC 2026-W14

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

2026-04-02 CVE-2026-28389

highMicrosoft MSRC 2026-W14

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

2026-04-02 CVE-2026-28390

highMicrosoft MSRC 2026-W14

Potential Use-after-free in DANE Client Code

2026-04-02 CVE-2026-28387

lowMicrosoft MSRC 2026-W14

serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

2026-04-02 CVE-2026-23472

mediumMicrosoft MSRC 2026-W14

Sleuth Kit APFS Keybag Parser Out-of-Bounds Read

2026-04-02 CVE-2026-40025

mediumMicrosoft MSRC 2026-W14

Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read

2026-04-02 CVE-2026-40026

mediumMicrosoft MSRC 2026-W14

Sleuth Kit tsk_recover Path Traversal

2026-04-02 CVE-2026-40024

highMicrosoft MSRC 2026-W14

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

2026-04-02 CVE-2026-32282

mediumMicrosoft MSRC 2026-W14

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

2026-04-02 CVE-2026-32283

mediumMicrosoft MSRC 2026-W14

Unbounded allocation for old GNU sparse in archive/tar

2026-04-02 CVE-2026-32288

mediumMicrosoft MSRC 2026-W14

Unexpected work during chain building in crypto/x509

2026-04-02 CVE-2026-32280

highMicrosoft MSRC 2026-W14

util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

2026-04-02 CVE-2026-27456

mediumMicrosoft MSRC 2026-W14