Vendor: microsoft

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

2026-04-02 CVE-2026-23401

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

2026-04-02 CVE-2026-4878

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

2026-04-02 CVE-2026-35093

LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure

2026-04-02 CVE-2026-34757

Mariner

2026-04-02 CVE-2026-35385

Mariner

2026-04-02 CVE-2026-35387

Mariner

2026-04-02 CVE-2026-35388

Mariner

2026-04-02 CVE-2026-35414

mediumMicrosoft CVE 2026-W14

Mariner

2026-04-02 CVE-2026-35535

Mariner

2026-04-02 CVE-2026-35549

Mariner

2026-04-02 CVE-2026-40226

Mariner

2026-04-02 CVE-2026-40385

Mariner

2026-04-02 CVE-2026-40386

Mariner

2026-04-02 CVE-2026-40393

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33105

criticalMicrosoft MSRC 2026-W14

Microsoft Bing Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32186

criticalMicrosoft MSRC 2026-W14

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-02 CVE-2026-33119

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2026-04-02 CVE-2026-33118

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

2026-04-02 CVE-2026-27144

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

2026-04-02 CVE-2026-27143

criticalMicrosoft MSRC 2026-W14

net: bonding: fix use-after-free in bond_xmit_broadcast()

2026-04-02 CVE-2026-31419

net/sched: cls_flow: fix NULL pointer dereference on shared blocks

2026-04-02 CVE-2026-31422

net/sched: cls_fw: fix NULL pointer dereference on shared blocks

2026-04-02 CVE-2026-31421

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

2026-04-02 CVE-2026-31423

net/x25: Fix overflow when accumulating packets

2026-04-02 CVE-2026-31417

netfilter: conntrack: add missing netlink policy validations

2026-04-02 CVE-2026-31407

netfilter: ipset: drop logically empty buckets in mtype_del

2026-04-02 CVE-2026-31418

netfilter: nf_conntrack_expect: use expect->helper

2026-04-02 CVE-2026-31414

netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

2026-04-02 CVE-2026-31427

netfilter: nfnetlink_log: account for netlink header size

2026-04-02 CVE-2026-31416

netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD

2026-04-02 CVE-2026-31428

netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

2026-04-02 CVE-2026-31424

NULL Pointer Dereference When Processing a Delta CRL

2026-04-02 CVE-2026-28388

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

2026-04-02 CVE-2026-34446

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

2026-04-02 CVE-2026-34445

OpenPrinting CUPS: Heap overflow in `get_options()`

2026-04-02 CVE-2026-34979

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

2026-04-02 CVE-2026-29181

OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

2026-04-02 CVE-2026-39882

osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature Verification

2026-04-02 CVE-2026-39853

osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read

2026-04-02 CVE-2026-39855

osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation

2026-04-02 CVE-2026-39856

Path traversal issue with zip.vim in Vim

2026-04-02 CVE-2026-35177

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

2026-04-02 CVE-2026-28389

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

2026-04-02 CVE-2026-28390

Potential Use-after-free in DANE Client Code

2026-04-02 CVE-2026-28387

serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

2026-04-02 CVE-2026-23472

Sleuth Kit APFS Keybag Parser Out-of-Bounds Read

2026-04-02 CVE-2026-40025

Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read

2026-04-02 CVE-2026-40026

Sleuth Kit tsk_recover Path Traversal

2026-04-02 CVE-2026-40024

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

2026-04-02 CVE-2026-32282

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

2026-04-02 CVE-2026-32283

Unbounded allocation for old GNU sparse in archive/tar

2026-04-02 CVE-2026-32288

Unexpected work during chain building in crypto/x509

2026-04-02 CVE-2026-32280

util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

2026-04-02 CVE-2026-27456

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

2026-04-02 CVE-2026-3184

Vim Ex command injection in Vims NetBeans integration

2026-04-02 CVE-2026-39881

Vim modeline bypass via various options affects Vim < 9.2.0276

2026-04-02 CVE-2026-34982

wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

2026-04-02 CVE-2026-23444

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

2026-04-02 CVE-2026-34601