Security Warnings — Week: 2026-W16

Microsoft Brokering File System Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-32091

highMicrosoft MSRC 2026-W16

Microsoft Brokering File System Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-32219

highMicrosoft MSRC 2026-W16

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-26152

highMicrosoft MSRC 2026-W16

Microsoft Defender Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-33825

highMicrosoft MSRC 2026-W16

Microsoft Defender: Schwachstelle ermöglicht Erlangen von Administratorrechten

2026-04-14 CVE-2026-33825

highMSRC 2026-W16

Microsoft Defender: Schwachstelle ermöglicht Privilegieneskalation

2026-04-14 CVE-2026-33825

highBSI 2026-W16

Microsoft Edge: Mehrere Schwachstellen

2026-04-14 WID-SEC-2026-1062

mediumBSI 2026-W16

Microsoft Excel Information Disclosure Vulnerability

2026-04-14 CVE-2026-32188

highMicrosoft MSRC 2026-W16

Microsoft Excel Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32189

highMicrosoft MSRC 2026-W16

Microsoft Excel Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32197

highMicrosoft MSRC 2026-W16

Microsoft Excel Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32198

highMicrosoft MSRC 2026-W16

Microsoft Excel Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32199

highMicrosoft MSRC 2026-W16

Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-32184

highMicrosoft MSRC 2026-W16

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

2026-04-14 CVE-2026-26155

mediumMicrosoft MSRC 2026-W16

Microsoft Management Console Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-27914

highMicrosoft MSRC 2026-W16

Microsoft Office Remote Code Execution

2026-04-14 CVE-2009-0238

highMicrosoft CVE 2026-W16

Microsoft Office Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32190

highMicrosoft MSRC 2026-W16

Microsoft Power Apps Security Feature Bypass

2026-04-14 CVE-2026-26149

criticalMicrosoft MSRC 2026-W16

Microsoft PowerPoint Remote Code Execution Vulnerability

2026-04-14 CVE-2026-32200

highMicrosoft MSRC 2026-W16

Microsoft PowerShell Security Feature Bypass Vulnerability

2026-04-14 CVE-2026-26143

highMicrosoft MSRC 2026-W16

Microsoft SharePoint Server Improper Input Validation Vulnerability

2026-04-14 CVE-2026-32201

highMicrosoft CVE 2026-W16

Microsoft SharePoint Server Spoofing Vulnerability

2026-04-14 CVE-2026-20945

mediumMicrosoft CVE 2026-W16

Microsoft SQL Server Remote Code Execution Vulnerability

2026-04-14 CVE-2026-33120

highMicrosoft MSRC 2026-W16

Microsoft Windows: Mehrere Schwachstellen

2026-04-14 WID-SEC-2023-2890

criticalBSI 2026-W16

Microsoft Word Information Disclosure Vulnerability

2026-04-14 CVE-2026-33822

mediumMicrosoft MSRC 2026-W16

Microsoft Word Remote Code Execution Vulnerability

2026-04-14 CVE-2026-23657

highMicrosoft MSRC 2026-W16

Microsoft Word Remote Code Execution Vulnerability

2026-04-14 CVE-2026-33095

highMicrosoft MSRC 2026-W16

MinIO: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

2026-04-14 WID-SEC-2026-1081

highBSI 2026-W16

MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix

2026-04-14 CVE-2026-25250

mediumMicrosoft MSRC 2026-W16

Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen

2026-04-14 CVE-2025-59375

highBSI 2026-W16

net: bonding: fix use-after-free in bond_xmit_broadcast()

2026-04-14 CVE-2026-31419

highMicrosoft MSRC 2026-W16

net/sched: cls_flow: fix NULL pointer dereference on shared blocks

2026-04-14 CVE-2026-31422

mediumMicrosoft MSRC 2026-W16

net/sched: cls_fw: fix NULL pointer dereference on shared blocks

2026-04-14 CVE-2026-31421

mediumMicrosoft MSRC 2026-W16

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

2026-04-14 CVE-2026-31423

mediumMicrosoft MSRC 2026-W16

net/x25: Fix overflow when accumulating packets

2026-04-14 CVE-2026-31417

highMicrosoft MSRC 2026-W16

netfilter: conntrack: add missing netlink policy validations

2026-04-14 CVE-2026-31407

highMicrosoft MSRC 2026-W16

netfilter: ipset: drop logically empty buckets in mtype_del

2026-04-14 CVE-2026-31418

highMicrosoft MSRC 2026-W16

netfilter: nf_conntrack_expect: use expect->helper

2026-04-14 CVE-2026-31414

highMicrosoft MSRC 2026-W16

netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

2026-04-14 CVE-2026-31427

highMicrosoft MSRC 2026-W16

netfilter: nfnetlink_log: account for netlink header size

2026-04-14 CVE-2026-31416

highMicrosoft MSRC 2026-W16

netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD

2026-04-14 CVE-2026-31428

mediumMicrosoft MSRC 2026-W16

netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

2026-04-14 CVE-2026-31424

mediumMicrosoft MSRC 2026-W16

NULL Pointer Dereference When Processing a Delta CRL

2026-04-14 CVE-2026-28388

mediumMicrosoft MSRC 2026-W16

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

2026-04-14 CVE-2026-34446

mediumMicrosoft MSRC 2026-W16

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

2026-04-14 CVE-2026-34445

highMicrosoft MSRC 2026-W16

OpenJPEG: Schwachstelle ermöglicht Denial of Service

2026-04-14 WID-SEC-2026-1080

lowBSI 2026-W16

OpenPrinting CUPS: Heap overflow in `get_options()`

2026-04-14 CVE-2026-34979

mediumMicrosoft MSRC 2026-W16

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

2026-04-14 CVE-2026-29181

highMicrosoft MSRC 2026-W16

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

2026-04-14 CVE-2026-39882

mediumMicrosoft MSRC 2026-W16

osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature Verification

2026-04-14 CVE-2026-39853

highMicrosoft MSRC 2026-W16

osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read

2026-04-14 CVE-2026-39855

mediumMicrosoft MSRC 2026-W16

osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation

2026-04-14 CVE-2026-39856

mediumMicrosoft MSRC 2026-W16

Package Catalog Information Disclosure Vulnerability

2026-04-14 CVE-2026-32081

mediumMicrosoft MSRC 2026-W16

Path traversal issue with zip.vim in Vim

2026-04-14 CVE-2026-35177

mediumMicrosoft MSRC 2026-W16

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

2026-04-14 CVE-2026-28389

highMicrosoft MSRC 2026-W16

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

2026-04-14 CVE-2026-28390

highMicrosoft MSRC 2026-W16

Potential Use-after-free in DANE Client Code

2026-04-14 CVE-2026-28387

lowMicrosoft MSRC 2026-W16

PowerShell Elevation of Privilege Vulnerability

2026-04-14 CVE-2026-26170

highMicrosoft MSRC 2026-W16

QEMU: Schwachstelle ermöglicht Manipulation, Offenlegung und DoS

2026-04-14 WID-SEC-2026-1083

mediumBSI 2026-W16

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

2026-04-14 CVE-2025-69223

highRed Hat 2026-W16