Security Warnings — Week: 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21332

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21333

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21335

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21373

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21398

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21414

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21415

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21425

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21428

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21449

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-28928

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35256

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35271

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35272

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37318

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37319

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37320

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37321

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37322

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37323

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37324

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37326

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37327

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37328

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37329

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37330

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37331

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37332

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37333

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37336

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38087

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38088

highMicrosoft MSRC 2026-W14

Squashfs: check the inode number is not the invalid value of zero

2026-04-01 CVE-2024-26982

highMicrosoft MSRC 2026-W14

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC

2026-04-01 CVE-2024-40897

highMicrosoft MSRC 2026-W14

SUNRPC: fix a memleak in gss_import_v2_context

2026-04-01 CVE-2023-52653

mediumMicrosoft MSRC 2026-W14

SUNRPC: fix some memleaks in gssx_dec_option_array

2026-04-01 CVE-2024-27388

mediumMicrosoft MSRC 2026-W14

SUNRPC: lock against ->sock changing during sysfs read

2026-04-01 CVE-2022-48816

mediumMicrosoft MSRC 2026-W14

swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y

2026-04-01 CVE-2024-36925

mediumMicrosoft MSRC 2026-W14

tcp_metrics: validate source addr length

2026-04-01 CVE-2024-42154

mediumMicrosoft MSRC 2026-W14

tcp: avoid too many retransmit packets

2026-04-01 CVE-2024-41007

lowMicrosoft MSRC 2026-W14

TensorFlow segfault in array_ops.upper_bound

2026-04-01 CVE-2023-33976

highMicrosoft MSRC 2026-W14

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird &l

2026-04-01 CVE-2024-6614

mediumMicrosoft MSRC 2026-W14

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily e.g. leading to a denial of service (network is unreach

2026-04-01 CVE-2023-52340

highMicrosoft MSRC 2026-W14

The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed headers can lead to HTTP request smuggling. Specifically if a

2026-04-01 CVE-2024-27982

mediumMicrosoft MSRC 2026-W14

tipc: fix kernel warning when sending SYN message

2026-04-01 CVE-2023-52700

mediumMicrosoft MSRC 2026-W14

tmpfs: fix race on handling dquot rbtree

2026-04-01 CVE-2024-27058

mediumMicrosoft MSRC 2026-W14

tqdm CLI arguments injection attack

2026-04-01 CVE-2024-34062

mediumMicrosoft MSRC 2026-W14

tracing/timerlat: Only clear timer if a kthread exists

2026-04-01 CVE-2024-46845

highMicrosoft MSRC 2026-W14

tty: add the option to have a tty reject a new ldisc

2026-04-01 CVE-2024-40966

mediumMicrosoft MSRC 2026-W14

tun: limit printing rate when illegal packet received by tun dev

2026-04-01 CVE-2024-27013

mediumMicrosoft MSRC 2026-W14

twisted.web has disordered HTTP pipeline response

2026-04-01 CVE-2024-41671

highMicrosoft MSRC 2026-W14

uio_hv_generic: Don't free decrypted memory

2026-04-01 CVE-2024-36910

mediumMicrosoft MSRC 2026-W14

um: line: always fill *error_out in setup_one_line()

2026-04-01 CVE-2024-46844

highMicrosoft MSRC 2026-W14

Unintentional exposure of environment variables to subprocesses in sentry-sdk

2026-04-01 CVE-2024-40647

mediumMicrosoft MSRC 2026-W14

usb: atm: cxacru: fix endpoint checking in cxacru_bind()

2026-04-01 CVE-2024-41097

mediumMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in port "disable" sysfs attribute

2026-04-01 CVE-2024-26933

highMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in usb_deauthorize_interface()

2026-04-01 CVE-2024-26934

highMicrosoft MSRC 2026-W14

usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock

2026-04-01 CVE-2024-42085

mediumMicrosoft MSRC 2026-W14

usb: typec: tcpm: Check for port partner validity before consuming it

2026-04-01 CVE-2024-36893

mediumMicrosoft MSRC 2026-W14

usb: typec: ucsi: Limit read size on v1.2

2026-04-01 CVE-2024-35924

mediumMicrosoft MSRC 2026-W14