Week: 2026-W14

Mariner

2026-04-02 CVE-2026-35387

Mariner

2026-04-02 CVE-2026-35388

Mariner

2026-04-02 CVE-2026-35414

mediumMicrosoft CVE 2026-W14

Mariner

2026-04-02 CVE-2026-35535

Mariner

2026-04-02 CVE-2026-35549

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33105

criticalMicrosoft MSRC 2026-W14

Microsoft Bing Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32186

criticalMicrosoft MSRC 2026-W14

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-02 CVE-2026-33119

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2026-04-02 CVE-2026-33118

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

2026-04-02 CVE-2026-27144

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

2026-04-02 CVE-2026-27143

criticalMicrosoft MSRC 2026-W14

netfilter: conntrack: add missing netlink policy validations

2026-04-02 CVE-2026-31407

Netgate pfSense Plus und CE: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0961

highBSI 2026-W14

Netty: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0846

mediumBSI 2026-W14

nghttp2: Schwachstelle ermöglicht Denial of Service

2026-04-02 WID-SEC-2026-0775

mediumBSI 2026-W14

NULL Pointer Dereference When Processing a Delta CRL

2026-04-02 CVE-2026-28388

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

2026-04-02 CVE-2026-34446

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

2026-04-02 CVE-2026-34445

OpenPrinting CUPS: Heap overflow in `get_options()`

2026-04-02 CVE-2026-34979

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

2026-04-02 CVE-2026-29181

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

2026-04-02 CVE-2026-39882

Path traversal issue with zip.vim in Vim

2026-04-02 CVE-2026-35177

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

2026-04-02 CVE-2026-28389

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

2026-04-02 CVE-2026-28390

Potential Use-after-free in DANE Client Code

2026-04-02 CVE-2026-28387

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0935

highBSI 2026-W14

Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Codeausführung und potenziell Denial of Service

2026-04-02 WID-SEC-2026-0494

mediumBSI 2026-W14

Red Hat Enterprise Linux (nfs-utils): Schwachstelle ermöglicht Offenlegung von Informationen

2026-04-02 WID-SEC-2026-0615

mediumBSI 2026-W14

Red Hat Enterprise Linux (Python Protobuf): Schwachstelle ermöglicht Denial of Service

2026-04-02 WID-SEC-2026-0480

mediumBSI 2026-W14

Red Hat OpenShift Service Mesh (Kiali): Schwachstelle ermöglicht Denial of Service

2026-04-02 WID-SEC-2026-0479

mediumBSI 2026-W14

serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

2026-04-02 CVE-2026-23472

Sleuth Kit APFS Keybag Parser Out-of-Bounds Read

2026-04-02 CVE-2026-40025

Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read

2026-04-02 CVE-2026-40026

Sleuth Kit tsk_recover Path Traversal

2026-04-02 CVE-2026-40024

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

2026-04-02 CVE-2026-32282

TrueConf Client Download of Code Without Integrity Check Vulnerability

2026-04-02 CVE-2026-3502

highTrueConf CVE 2026-W14

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

2026-04-02 CVE-2026-32283

Unbounded allocation for old GNU sparse in archive/tar

2026-04-02 CVE-2026-32288

Unexpected work during chain building in crypto/x509

2026-04-02 CVE-2026-32280

util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

2026-04-02 CVE-2026-27456

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

2026-04-02 CVE-2026-3184

VertiGIS FM: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0959

highBSI 2026-W14

vim (NetBeans): Schwachstelle ermöglicht Codeausführung

2026-04-02 WID-SEC-2026-0419

mediumBSI 2026-W14

Vim Ex command injection in Vims NetBeans integration

2026-04-02 CVE-2026-39881

Vim modeline bypass via various options affects Vim < 9.2.0276

2026-04-02 CVE-2026-34982

vim: Schwachstelle ermöglicht Codeausführung

2026-04-02 WID-SEC-2026-0904

highBSI 2026-W14

WebKitGTK: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0782

highBSI 2026-W14

wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

2026-04-02 CVE-2026-23444

Xen und Citrix Systems XenServer: Mehrere Schwachstellen

2026-04-02 WID-SEC-2026-0760

mediumBSI 2026-W14

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

2026-04-02 CVE-2026-34601

.NET and Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-38095

.NET and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35264