Vendor: microsoft

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-06 CVE-2026-0385

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-04-06 CVE-2026-23302

net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

2026-04-06 CVE-2026-23368

net: usb: kaweth: validate USB endpoints

2026-04-06 CVE-2026-23312

net: usb: pegasus: validate USB endpoints

2026-04-06 CVE-2026-23290

net/sched: ets: fix divide by zero in the offload path

2026-04-06 CVE-2026-23379

nfc: nci: complete pending data exchange on device close

2026-04-06 CVE-2026-23330

nfc: nci: free skb on nci_transceive early error paths

2026-04-06 CVE-2026-23339

nfc: pn533: properly drop the usb interface reference on disconnect

2026-04-06 CVE-2026-23291

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

2026-04-06 CVE-2026-27447

mediumMicrosoft CVE 2026-W15

OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

2026-04-06 CVE-2026-34978

mediumMicrosoft CVE 2026-W15

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

2026-04-06 CVE-2025-66038

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

2026-04-06 CVE-2025-66215

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

2026-04-06 CVE-2025-49010

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters

2026-04-06 CVE-2026-2100

mediumMicrosoft CVE 2026-W15

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

2026-04-06 CVE-2026-23361

pinctrl: equilibrium: fix warning trace on load

2026-04-06 CVE-2026-23308

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

2026-04-06 CVE-2026-23370

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

2026-04-06 CVE-2026-23335

scsi: core: Fix refcount leak for tagset_refcnt

2026-04-06 CVE-2026-23296

scsi: target: Fix recursive locking in __configfs_open_file()

2026-04-06 CVE-2026-23292

smb: client: Don't log plaintext credentials in cifs_set_cifscreds

2026-04-06 CVE-2026-23303

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

2026-04-06 CVE-2026-23336

wifi: libertas: fix use-after-free in lbs_free_adapter()

2026-04-06 CVE-2026-23281

wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()

2026-04-06 CVE-2026-23279

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

2026-04-06 CVE-2026-23315

wifi: radiotap: reject radiotap with unknown bits

2026-04-06 CVE-2026-23367

Libssh: libssh: denial of service due to malformed sftp message

2026-04-03 CVE-2026-0968

lowMicrosoft CVE 2026-W14

Mariner

2026-04-03 CVE-2026-35386

lowMicrosoft CVE 2026-W14

netfilter: nft_set_rbtree: validate open interval overlap

2026-04-03 CVE-2026-23333

mediumMicrosoft CVE 2026-W14

usb: gadget: f_ncm: align net_device lifecycle with bind/unbind

2026-04-03 CVE-2026-23320

mediumMicrosoft CVE 2026-W14

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

2026-04-02 CVE-2026-31426

Addressable has a Regular Expression Denial of Service in Addressable templates

2026-04-02 CVE-2026-35611

apparmor: fix differential encoding verification

2026-04-02 CVE-2026-23409

apparmor: Fix double free of ns_name in aa_replace_profiles()

2026-04-02 CVE-2026-23408

apparmor: fix memory leak in verify_header

2026-04-02 CVE-2026-23403

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

2026-04-02 CVE-2026-23407

apparmor: fix race between freeing data and fs accessing it

2026-04-02 CVE-2026-23411

apparmor: fix race on rawdata dereference

2026-04-02 CVE-2026-23410

apparmor: fix side-effect bug in match_char() macro usage

2026-04-02 CVE-2026-23406

apparmor: fix: limit the number of levels of policy namespaces

2026-04-02 CVE-2026-23405

apparmor: replace recursive profile removal with iterative approach

2026-04-02 CVE-2026-23404

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

2026-04-02 CVE-2026-34933

Azure AI Foundry Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32213

criticalMicrosoft MSRC 2026-W14

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-26135

criticalMicrosoft MSRC 2026-W14

Azure Databricks Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33107

criticalMicrosoft MSRC 2026-W14

Azure MCP Server Information Disclosure Vulnerability

2026-04-02 CVE-2026-32211

criticalMicrosoft MSRC 2026-W14

Azure SRE Agent Information Disclosure Vulnerability

2026-04-02 CVE-2026-32173

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

2026-04-02 CVE-2026-31408

bridge: mrp: reject zero test interval to avoid OOM panic

2026-04-02 CVE-2026-31420

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

2026-04-02 CVE-2026-33810

Code execution vulnerability in SWIG code generation in cmd/go

2026-04-02 CVE-2026-27140

criticalMicrosoft MSRC 2026-W14

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

2026-04-02 CVE-2026-39316

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

2026-04-02 CVE-2026-39314

Heap Buffer Overflow in Hexadecimal Conversion

2026-04-02 CVE-2026-31789

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

2026-04-02 CVE-2026-31790

Inefficient policy validation in crypto/x509

2026-04-02 CVE-2026-32281

ipv6: add NULL checks for idev in SRv6 paths

2026-04-02 CVE-2026-23442

JsBraceDepth Context Tracking Bugs (XSS) in html/template

2026-04-02 CVE-2026-32289