Security Warnings — Week: 2026-W14

drm/xe: Fix potential integer overflow in page size calculation

2026-04-01 CVE-2024-42066

mediumMicrosoft MSRC 2026-W14

drm/xe/xe_devcoredump: Check NULL before assignments

2026-04-01 CVE-2024-42081

mediumMicrosoft MSRC 2026-W14

Dynamics 365 Business Central Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-43460

highMicrosoft MSRC 2026-W14

Dynamics 365 Customer Insights Spoofing Vulnerability

2026-04-01 CVE-2024-30047

highMicrosoft MSRC 2026-W14

Dynamics 365 Customer Insights Spoofing Vulnerability

2026-04-01 CVE-2024-30048

highMicrosoft MSRC 2026-W14

Excessive time spent checking DSA keys and parameters

2026-04-01 CVE-2024-4603

mediumMicrosoft MSRC 2026-W14

Exiv2 has an out-of-bounds read in AsfVideo::streamProperties

2026-04-01 CVE-2024-39695

mediumMicrosoft MSRC 2026-W14

expat: Schwachstelle ermöglicht Denial of Service

2026-04-01 WID-SEC-2025-2045

mediumBSI 2026-W14

ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

2026-04-01 CVE-2024-40998

mediumMicrosoft MSRC 2026-W14

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

2026-04-01 CVE-2024-42160

highMicrosoft MSRC 2026-W14

f2fs: compress: fix to guarantee persisting compressed blocks by CP

2026-04-01 CVE-2024-27035

mediumMicrosoft MSRC 2026-W14

f2fs: don't set RO when shutting down f2fs

2026-04-01 CVE-2024-40969

mediumMicrosoft MSRC 2026-W14

f2fs: fix to avoid potential panic during recovery

2026-04-01 CVE-2024-27032

mediumMicrosoft MSRC 2026-W14

f2fs: fix to wait on block writeback for post_read case

2026-04-01 CVE-2023-52682

mediumMicrosoft MSRC 2026-W14

F5 BIG-IP und F5OS: Mehrere Schwachstellen

2026-04-01 WID-SEC-2025-2310

criticalBSI 2026-W14

fbdev: savage: Handle err return when savagefb_check_var failed

2026-04-01 CVE-2024-39475

mediumMicrosoft MSRC 2026-W14

filelock: fix potential use-after-free in posix_lock_inode

2026-04-01 CVE-2024-41049

highMicrosoft MSRC 2026-W14

firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

2026-04-01 CVE-2024-41038

mediumMicrosoft MSRC 2026-W14

Fluent Bit Memory Corruption Vulnerability

2026-04-01 CVE-2024-4323

criticalMicrosoft MSRC 2026-W14

fork: defer linking file vma until vma is fully initialized

2026-04-01 CVE-2024-27022

highMicrosoft MSRC 2026-W14

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerabili

2026-04-01 CVE-2024-6610

mediumMicrosoft MSRC 2026-W14

FreeBSD Project FreeBSD OS: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0878

mediumBSI 2026-W14

fs/ntfs3: Fixed overflow check in mi_enum_attr()

2026-04-01 CVE-2024-27407

highMicrosoft MSRC 2026-W14

fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF

2026-04-01 CVE-2024-46786

highMicrosoft MSRC 2026-W14

GDI+ Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21338

highMicrosoft MSRC 2026-W14

gfs2: Fix NULL pointer dereference in gfs2_log_flush

2026-04-01 CVE-2024-42079

mediumMicrosoft MSRC 2026-W14

gfs2: Fix slab-use-after-free in gfs2_qd_dealloc

2026-04-01 CVE-2023-52760

highMicrosoft MSRC 2026-W14

Git's protections for cloning untrusted repositories can be bypassed

2026-04-01 CVE-2024-32465

highMicrosoft MSRC 2026-W14

GitHub: CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

2026-04-01 CVE-2024-32002

criticalMicrosoft MSRC 2026-W14

GitHub: CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositories

2026-04-01 CVE-2024-32004

highMicrosoft MSRC 2026-W14

Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38517

highMicrosoft MSRC 2026-W14

Github: CVE-2024-39684 TenCent RapidJSON Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-39684

highMicrosoft MSRC 2026-W14

GitHub: CVE-2024-50338 Malformed URL allows information disclosure through git-credential-manager

2026-04-01 CVE-2024-50338

highMicrosoft MSRC 2026-W14

go-git has an Argument Injection via the URL field

2026-04-01 CVE-2025-21613

highMicrosoft MSRC 2026-W14

Golang Go: Mehrere Schwachstellen

2026-04-01 CVE-2025-61727

mediumBSI 2026-W14

Golang Go: Mehrere Schwachstellen

2026-04-01 CVE-2025-61726

mediumBSI 2026-W14

Google Dawn Use-After-Free Vulnerability

2026-04-01 CVE-2026-5281

highGoogle CVE 2026-W14

gpiolib: cdev: fix uninitialised kfifo

2026-04-01 CVE-2024-36898

highMicrosoft MSRC 2026-W14

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

2026-04-01 CVE-2024-36899

highMicrosoft MSRC 2026-W14

greybus: Fix use-after-free bug in gb_interface_release due to race condition.

2026-04-01 CVE-2024-39495

highMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38164

criticalMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38176

highMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38183

criticalMicrosoft MSRC 2026-W14

Gtk3: gtk2: library injection from cwd

2026-04-01 CVE-2024-6655

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.

2026-04-01 CVE-2024-32609

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c).

2026-04-01 CVE-2024-32617

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c a different vulnerability than CVE-2024-32612.

2026-04-01 CVE-2024-32613

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c) resulting in the corruption of the

2026-04-01 CVE-2024-32621

criticalMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c) resulting in the corruption of the in

2026-04-01 CVE-2024-32624

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c resulting in the corruption of the instruction pointer.

2026-04-01 CVE-2024-32619

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).

2026-04-01 CVE-2024-32623

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c caused by the earlier use of an initialized pointer.

2026-04-01 CVE-2024-32615

criticalMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).

2026-04-01 CVE-2024-32622

criticalMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

2026-04-01 CVE-2024-33874

criticalMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c.

2026-04-01 CVE-2024-33876

mediumMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c resulting in the corruption of the instruction pointer.

2026-04-01 CVE-2024-33875

mediumMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c resulting in the corruption of the instruction pointer.

2026-04-01 CVE-2024-32607

mediumMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c resulting in a corrupted instruction pointer.

2026-04-01 CVE-2024-32610

mediumMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

2026-04-01 CVE-2024-32611

criticalMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode resulting in the corruption of the instruction pointer and causing denial of service or potential code execution

2026-04-01 CVE-2024-29166

mediumMicrosoft MSRC 2026-W14