Security Warnings — Vendor: microsoft

drm/drm_file: Fix pid refcounting race

2026-04-01 CVE-2024-39486

highMicrosoft MSRC 2026-W14

drm/fbdev-dma: Only set smem_start is enable per module option

2026-04-01 CVE-2024-41094

mediumMicrosoft MSRC 2026-W14

drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()

2026-04-01 CVE-2024-26938

mediumMicrosoft MSRC 2026-W14

drm/i915/gt: Fix potential UAF by revoke of fence registers

2026-04-01 CVE-2024-41092

highMicrosoft MSRC 2026-W14

drm/i915/hwmon: Get rid of devm

2026-04-01 CVE-2024-39479

highMicrosoft MSRC 2026-W14

drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes

2026-04-01 CVE-2024-42101

mediumMicrosoft MSRC 2026-W14

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

2026-04-01 CVE-2024-41089

mediumMicrosoft MSRC 2026-W14

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

2026-04-01 CVE-2024-41095

mediumMicrosoft MSRC 2026-W14

drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()

2026-04-01 CVE-2024-35951

mediumMicrosoft MSRC 2026-W14

drm/vc4: don't check if plane->state->fb == state->fb

2026-04-01 CVE-2024-35932

mediumMicrosoft MSRC 2026-W14

drm/vkms: Avoid reading beyond LUT array

2026-04-01 CVE-2023-52649

highMicrosoft MSRC 2026-W14

drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed

2026-04-01 CVE-2024-26940

mediumMicrosoft MSRC 2026-W14

drm/vmwgfx: Unmap the surface before resetting it on a plane state

2026-04-01 CVE-2023-52648

mediumMicrosoft MSRC 2026-W14

drm/vrr: Set VRR capable prop only if it is attached to connector

2026-04-01 CVE-2022-48843

mediumMicrosoft MSRC 2026-W14

drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init

2026-04-01 CVE-2024-42065

mediumMicrosoft MSRC 2026-W14

drm/xe: Fix potential integer overflow in page size calculation

2026-04-01 CVE-2024-42066

mediumMicrosoft MSRC 2026-W14

drm/xe/xe_devcoredump: Check NULL before assignments

2026-04-01 CVE-2024-42081

mediumMicrosoft MSRC 2026-W14

Dynamics 365 Business Central Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-43460

highMicrosoft MSRC 2026-W14

Dynamics 365 Customer Insights Spoofing Vulnerability

2026-04-01 CVE-2024-30047

highMicrosoft MSRC 2026-W14

Dynamics 365 Customer Insights Spoofing Vulnerability

2026-04-01 CVE-2024-30048

highMicrosoft MSRC 2026-W14

Excessive time spent checking DSA keys and parameters

2026-04-01 CVE-2024-4603

mediumMicrosoft MSRC 2026-W14

Exiv2 has an out-of-bounds read in AsfVideo::streamProperties

2026-04-01 CVE-2024-39695

mediumMicrosoft MSRC 2026-W14

ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

2026-04-01 CVE-2024-40998

mediumMicrosoft MSRC 2026-W14

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

2026-04-01 CVE-2024-42160

highMicrosoft MSRC 2026-W14

f2fs: compress: fix to guarantee persisting compressed blocks by CP

2026-04-01 CVE-2024-27035

mediumMicrosoft MSRC 2026-W14

f2fs: don't set RO when shutting down f2fs

2026-04-01 CVE-2024-40969

mediumMicrosoft MSRC 2026-W14

f2fs: fix to avoid potential panic during recovery

2026-04-01 CVE-2024-27032

mediumMicrosoft MSRC 2026-W14

f2fs: fix to wait on block writeback for post_read case

2026-04-01 CVE-2023-52682

mediumMicrosoft MSRC 2026-W14

fbdev: savage: Handle err return when savagefb_check_var failed

2026-04-01 CVE-2024-39475

mediumMicrosoft MSRC 2026-W14

filelock: fix potential use-after-free in posix_lock_inode

2026-04-01 CVE-2024-41049

highMicrosoft MSRC 2026-W14

firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

2026-04-01 CVE-2024-41038

mediumMicrosoft MSRC 2026-W14

Fluent Bit Memory Corruption Vulnerability

2026-04-01 CVE-2024-4323

criticalMicrosoft MSRC 2026-W14

fork: defer linking file vma until vma is fully initialized

2026-04-01 CVE-2024-27022

highMicrosoft MSRC 2026-W14

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerabili

2026-04-01 CVE-2024-6610

mediumMicrosoft MSRC 2026-W14

fs/ntfs3: Fixed overflow check in mi_enum_attr()

2026-04-01 CVE-2024-27407

highMicrosoft MSRC 2026-W14

fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF

2026-04-01 CVE-2024-46786

highMicrosoft MSRC 2026-W14

GDI+ Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21338

highMicrosoft MSRC 2026-W14

gfs2: Fix NULL pointer dereference in gfs2_log_flush

2026-04-01 CVE-2024-42079

mediumMicrosoft MSRC 2026-W14

gfs2: Fix slab-use-after-free in gfs2_qd_dealloc

2026-04-01 CVE-2023-52760

highMicrosoft MSRC 2026-W14

Git's protections for cloning untrusted repositories can be bypassed

2026-04-01 CVE-2024-32465

highMicrosoft MSRC 2026-W14

GitHub: CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

2026-04-01 CVE-2024-32002

criticalMicrosoft MSRC 2026-W14

GitHub: CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositories

2026-04-01 CVE-2024-32004

highMicrosoft MSRC 2026-W14

Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38517

highMicrosoft MSRC 2026-W14

Github: CVE-2024-39684 TenCent RapidJSON Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-39684

highMicrosoft MSRC 2026-W14

GitHub: CVE-2024-50338 Malformed URL allows information disclosure through git-credential-manager

2026-04-01 CVE-2024-50338

highMicrosoft MSRC 2026-W14

go-git has an Argument Injection via the URL field

2026-04-01 CVE-2025-21613

highMicrosoft MSRC 2026-W14

gpiolib: cdev: fix uninitialised kfifo

2026-04-01 CVE-2024-36898

highMicrosoft MSRC 2026-W14

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

2026-04-01 CVE-2024-36899

highMicrosoft MSRC 2026-W14

greybus: Fix use-after-free bug in gb_interface_release due to race condition.

2026-04-01 CVE-2024-39495

highMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38164

criticalMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38176

highMicrosoft MSRC 2026-W14

GroupMe Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38183

criticalMicrosoft MSRC 2026-W14

Gtk3: gtk2: library injection from cwd

2026-04-01 CVE-2024-6655

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.

2026-04-01 CVE-2024-32609

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c).

2026-04-01 CVE-2024-32617

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c a different vulnerability than CVE-2024-32612.

2026-04-01 CVE-2024-32613

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c) resulting in the corruption of the

2026-04-01 CVE-2024-32621

criticalMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c) resulting in the corruption of the in

2026-04-01 CVE-2024-32624

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c resulting in the corruption of the instruction pointer.

2026-04-01 CVE-2024-32619

highMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).

2026-04-01 CVE-2024-32623

highMicrosoft MSRC 2026-W14