Vendor: microsoft

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-59282

Internet Shortcut Files Remote Code Execution Vulnerability

2026-03-31 CVE-2025-33053

iommu: Clear iommu-dma ops on cleanup

2026-03-31 CVE-2025-37877

iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid

2026-03-31 CVE-2025-37927

iommu/amd/pgtbl: Fix possible race while increase page table level

2026-03-31 CVE-2025-39961

iommu/s390: Make attach succeed when the device was surprise removed

2026-03-31 CVE-2025-39958

ipv4: start using dst_dev_rcu()

2026-03-31 CVE-2025-40074

ipvs: Defer ip_vs_ftp unregister during netns cleanup

2026-03-31 CVE-2025-40018

ipvs: fix uninit-value for saddr in do_output_route4

2026-03-31 CVE-2025-37961

irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

2026-03-31 CVE-2025-37819

irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs

2026-03-31 CVE-2025-37901

isofs: Prevent the use of too small fid

2026-03-31 CVE-2025-37780

ixgbevf: fix mailbox API compatibility by negotiating supported features

2026-03-31 CVE-2025-40104

jbd2: remove wrong sb->s_sequence check

2026-03-31 CVE-2025-37839

JDBC Driver for SQL Server Spoofing Vulnerability

2026-03-31 CVE-2025-59250

jfs: add sanity check for agwidth in dbMount

2026-03-31 CVE-2025-37740

jfs: Fix uninit-value access of imap allocated in the diMount() function

2026-03-31 CVE-2025-37742

jfs: Prevent copying of nlink with value 0 from disk inode

2026-03-31 CVE-2025-37741

jq has signed integer overflow in jv.c:jvp_array_write

2026-03-31 CVE-2024-23337

juliangruber brace-expansion index.js expand redos

2026-03-31 CVE-2025-5889

kasan: avoid sleepable page allocation from atomic context

2026-03-31 CVE-2025-38029

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-24063

ksmbd: Fix dangling pointer in krb_authenticate

2026-03-31 CVE-2025-37778

ksmbd: Fix race condition in RPC handle list access

2026-03-31 CVE-2025-40039

ksmbd: fix recursive locking in RPC handle list access

2026-03-31 CVE-2025-40090

ksmbd: fix the warning from __kernel_write_iter

2026-03-31 CVE-2025-37775

ksmbd: Fix UAF in __close_file_table_ids

2026-03-31 CVE-2025-37952

ksmbd: fix use-after-free in __smb2_lease_break_noti()

2026-03-31 CVE-2025-37777

ksmbd: fix use-after-free in kerberos authentication

2026-03-31 CVE-2025-37924

ksmbd: fix use-after-free in ksmbd_session_rpc_open

2026-03-31 CVE-2025-37926

ksmbd: fix use-after-free in session logoff

2026-03-31 CVE-2025-37899

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

2026-03-31 CVE-2025-37776

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

2026-03-31 CVE-2025-37802

ksmbd: prevent out-of-bounds stream writes by validating *pos

2026-03-31 CVE-2025-37947

ksmbd: prevent rename with empty string

2026-03-31 CVE-2025-37956

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

2026-03-31 CVE-2025-39943

criticalMicrosoft MSRC 2026-W14

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2026-03-31 CVE-2025-39942

ksmbd: transport_ipc: validate payload size before reading handle

2026-03-31 CVE-2025-40084

KVM: arm64: Prevent access to vCPU events before init

2026-03-31 CVE-2025-40102

KVM: arm64: Tear down vGIC on failed vCPU creation

2026-03-31 CVE-2025-37849

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

2026-03-31 CVE-2025-37957

KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

2026-03-31 CVE-2025-40038

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

2026-03-31 CVE-2022-49932

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

2026-03-31 CVE-2025-23141

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

2026-03-31 CVE-2025-40026

KVM: x86: Reset IRTE to host control if new route isn't postable

2026-03-31 CVE-2025-37885

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

2026-03-31 CVE-2022-50224

Lack of limit when parsing cookies can cause memory exhaustion in net/http

2026-03-31 CVE-2025-58186

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

2026-03-31 CVE-2025-5914

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

2026-03-31 CVE-2025-5915

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

2026-03-31 CVE-2025-5916

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

2026-03-31 CVE-2025-5917

Libarchive: reading past eof may be triggered for piped file streams

2026-03-31 CVE-2025-5918

libnvdimm/labels: Fix divide error in nd_label_data_init()

2026-03-31 CVE-2025-38072

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

2026-03-31 CVE-2025-12105

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

2026-03-31 CVE-2025-4948

Libsoup: null pointer dereference in libsoup may lead to denial of service

2026-03-31 CVE-2025-4476

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

2026-03-31 CVE-2025-4969

Libssh: out-of-bounds read in sftp_handle()

2026-03-31 CVE-2025-5318