Vendor: microsoft

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

2026-03-31 CVE-2025-47273

smb: client: Avoid race in open_cached_dir with lease breaks

2026-03-31 CVE-2025-37954

smb: client: fix crypto buffers in non-linear memory

2026-03-31 CVE-2025-40052

smb: client: Fix refcount leak for cifs_sb_tlink

2026-03-31 CVE-2025-40103

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

2026-03-31 CVE-2025-39929

smb: client: fix UAF in decryption with multichannel

2026-03-31 CVE-2025-37750

smb: client: Fix use-after-free in cifs_fill_dirent

2026-03-31 CVE-2025-38051

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

2026-03-31 CVE-2025-39933

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

2026-03-31 CVE-2025-39932

smc: Fix use-after-free in __pnet_find_base_ndev().

2026-03-31 CVE-2025-40064

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

2026-03-31 CVE-2025-23148

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59199

sound/virtio: Fix cancel_sync warnings on uninitialized work_structs

2026-03-31 CVE-2025-37805

spdlog pattern_formatter-inl.h scoped_padder resource consumption

2026-03-31 CVE-2025-6140

spi-rockchip: Fix register out of bounds access

2026-03-31 CVE-2025-38081

spi: cadence-quadspi: Implement refcount to handle unbind during busy

2026-03-31 CVE-2025-40005

spi: fsl-qspi: use devm function instead of driver remove

2026-03-31 CVE-2025-37842

spi: spi-imx: Add check for spi_imx_setupxfer()

2026-03-31 CVE-2025-37801

Squashfs: fix uninit-value in squashfs_get_parent

2026-03-31 CVE-2025-40049

Squid vulnerable to information disclosure via authentication credential leakage in error handling

2026-03-31 CVE-2025-62168

criticalMicrosoft MSRC 2026-W14

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand

2026-03-31 CVE-2025-61984

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

2026-03-31 CVE-2025-61985

Storage Spaces Direct Information Disclosure Vulnerability

2026-03-31 CVE-2025-59184

Storport.sys Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59192

Sudo before 1.9.17p1 allows local users to obtain root access

2026-03-31 CVE-2025-32463

criticalMicrosoft MSRC 2026-W14

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

2026-03-31 CVE-2025-32462

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

2026-03-31 CVE-2025-38089

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

2026-03-31 CVE-2025-4598

tar-fs has issue where extract can write outside the specified dir with a specific tarball

2026-03-31 CVE-2025-48387

Tarfile extracts filtered members when errorlevel=0

2026-03-31 CVE-2025-4435

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

2026-03-31 CVE-2025-39913

tcp_metrics: use dst_dev_net_rcu()

2026-03-31 CVE-2025-40075

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

2026-03-31 CVE-2025-39955

The x509 application adds trusted use instead of rejected use

2026-03-31 CVE-2025-4575

tipc: fix memory leak in tipc_link_xmit

2026-03-31 CVE-2025-37757

tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

2026-03-31 CVE-2025-37824

tls: make sure to abort the stream if headers are bogus

2026-03-31 CVE-2025-39946

tracing: Do not let histogram values have some modifiers

2026-03-31 CVE-2023-53093

tracing: dynevent: Add a missing lockdown check on dynevent

2026-03-31 CVE-2025-40021

tracing: Fix oob write in trace_seq_to_buffer()

2026-03-31 CVE-2025-37923

tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

2026-03-31 CVE-2025-40042

tracing: Silence warning when chunk allocation fails in trace_pid_write

2026-03-31 CVE-2025-39914

tracing: Verify event formats that have "%*p.."

2026-03-31 CVE-2025-37938

tranport: TLS host name wildcard matching too lax

2026-03-31 CVE-2024-47619

tty: n_gsm: Don't block input queue by waiting MSC

2026-03-31 CVE-2025-40071

tty: n_gsm: fix deadlock and link starvation in outgoing data path

2026-03-31 CVE-2022-50116

ublk: fix handling recovery & reissue in ublk_abort_queue()

2026-03-31 CVE-2025-37759

udmabuf: fix a buf size overflow issue during udmabuf creation

2026-03-31 CVE-2025-37803

uio_hv_generic: Let userspace take care of interrupt mask

2026-03-31 CVE-2025-40048

um: virtio_uml: Fix use-after-free after put_device in probe

2026-03-31 CVE-2025-39951

um: work around sched_yield not yielding in time-travel mode

2026-03-31 CVE-2025-37880

Unbounded allocation when parsing GNU sparse map in archive/tar

2026-03-31 CVE-2025-58183

Unbounded recursion in Python Protobuf

2026-03-31 CVE-2025-4565

undici Denial of Service attack via bad certificate data

2026-03-31 CVE-2025-47279

Universal Print Management Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29841

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticall

2026-03-31 CVE-2025-4802

urllib3 does not control redirects in browsers and Node.js

2026-03-31 CVE-2025-50182

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

2026-03-31 CVE-2025-50181

UrlMon Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-29842