Week: 2026-W14

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

2026-03-31 CVE-2025-49715

Erlang/OTP SSH Has Strict KEX Violations

2026-03-31 CVE-2025-46712

ESET PROTECT: Schwachstelle ermöglicht Offenlegung von Informationen

2026-03-31 WID-SEC-2026-0926

mediumBSI 2026-W14

espintcp: fix skb leaks

2026-03-31 CVE-2025-38057

Excessive CPU consumption in ParseAddress in net/mail

2026-03-31 CVE-2025-61725

Excessive CPU consumption in Reader.ReadResponse in net/textproto

2026-03-31 CVE-2025-61724

ext4: fix off-by-one error in do_split

2026-03-31 CVE-2025-23150

ext4: ignore xattrs past end

2026-03-31 CVE-2025-37738

Extraction filter bypass for linking outside extraction directory

2026-03-31 CVE-2025-4330

f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data

2026-03-31 CVE-2022-50009

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

2026-03-31 CVE-2025-37739

fbdev: omapfb: Add 'plane' value check

2026-03-31 CVE-2025-37851

firmware: arm_ffa: Set dma_mask for ffa devices

2026-03-31 CVE-2025-38043

firmware: arm_scmi: Balance device refcount when destroying devices

2026-03-31 CVE-2025-37905

fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()

2026-03-31 CVE-2025-37988

Fortinet FortiClientEMS: Schwachstelle ermöglicht Codeausführung

2026-03-31 WID-SEC-2026-0343

highBSI 2026-W14

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attacke

2026-03-31 CVE-2025-61099

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allow

2026-03-31 CVE-2025-61101

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows at

2026-03-31 CVE-2025-61106

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers

2026-03-31 CVE-2025-61105

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attacker

2026-03-31 CVE-2025-61104

fs: ntfs3: Fix integer overflow in run_unpack()

2026-03-31 CVE-2025-40068

fs/jfs: Prevent integer overflow in AG size calculation

2026-03-31 CVE-2025-37858

fs/ntfs3: Keep write operations atomic

2026-03-31 CVE-2025-37806

ftrace: Add cond_resched() to ftrace_graph_set_hash()

2026-03-31 CVE-2025-37940

Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

2026-03-31 CVE-2025-6199

genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie

2026-03-31 CVE-2025-38062

GitHub CVE-2025-54132: Arbitrary Image Fetch in Mermaid Diagram Tool

2026-03-31 CVE-2025-54132

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

2026-03-31 CVE-2025-4373

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

2026-03-31 CVE-2025-6052

GNU Binutils ld elflink.c elf_gc_sweep memory corruption

2026-03-31 CVE-2025-5244

GNU Binutils ldmisc.c vfinfo out-of-bounds

2026-03-31 CVE-2025-11840

GNU Binutils objdump debug.c debug_type_samep memory corruption

2026-03-31 CVE-2025-5245

GNU libc: Schwachstelle ermöglicht Denial of Service

2026-03-31 WID-SEC-2026-0918

mediumBSI 2026-W14

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

2026-03-31 CVE-2025-6141

HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference

2026-03-31 CVE-2025-6858

HDF5 H5Centry.c H5C__load_entry resource consumption

2026-03-31 CVE-2025-6817

HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

2026-03-31 CVE-2025-6269

HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow

2026-03-31 CVE-2025-6516

HDF5 H5FL.c H5FL__reg_gc_list use after free

2026-03-31 CVE-2025-6856

HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow

2026-03-31 CVE-2025-6270

HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

2026-03-31 CVE-2025-6857

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

2026-03-31 CVE-2025-6818

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

2026-03-31 CVE-2025-6816

HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow

2026-03-31 CVE-2025-6750

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

2026-03-31 CVE-2025-44904

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

2026-03-31 CVE-2025-44905

HID: pidff: Fix null pointer dereference in pidff_find_fields

2026-03-31 CVE-2025-37862

HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX

2026-03-31 CVE-2025-37942

HTACG tidy-html5 alloc.c defaultAlloc memory leak

2026-03-31 CVE-2025-6498

HTACG tidy-html5 parser.c prvTidyParseNamespace assertion

2026-03-31 CVE-2025-6497

HTMLParser quadratic complexity when processing malformed inputs

2026-03-31 CVE-2025-6069

i2c: cros-ec-tunnel: defer probe if parent EC is not present

2026-03-31 CVE-2025-37781

i3c: Add NULL pointer check in i3c_master_queue_ibi()

2026-03-31 CVE-2025-23147

iavf: fix hang on reboot with ice

2026-03-31 CVE-2023-53064

IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting

2026-03-31 WID-SEC-2025-2759

mediumBSI 2026-W14

Icu: stack buffer overflow in the srbroot::addtag function

2026-03-31 CVE-2025-5222

igc: fix PTM cycle trigger logic

2026-03-31 CVE-2025-37875

iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo

2026-03-31 CVE-2025-37970