Security Warnings — Source: msrc

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37332

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37333

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37336

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38087

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38088

highMicrosoft MSRC 2026-W14

Squashfs: check the inode number is not the invalid value of zero

2026-04-01 CVE-2024-26982

highMicrosoft MSRC 2026-W14

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC

2026-04-01 CVE-2024-40897

highMicrosoft MSRC 2026-W14

SUNRPC: fix a memleak in gss_import_v2_context

2026-04-01 CVE-2023-52653

mediumMicrosoft MSRC 2026-W14

SUNRPC: fix some memleaks in gssx_dec_option_array

2026-04-01 CVE-2024-27388

mediumMicrosoft MSRC 2026-W14

SUNRPC: lock against ->sock changing during sysfs read

2026-04-01 CVE-2022-48816

mediumMicrosoft MSRC 2026-W14

swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y

2026-04-01 CVE-2024-36925

mediumMicrosoft MSRC 2026-W14

tcp_metrics: validate source addr length

2026-04-01 CVE-2024-42154

mediumMicrosoft MSRC 2026-W14

tcp: avoid too many retransmit packets

2026-04-01 CVE-2024-41007

lowMicrosoft MSRC 2026-W14

TensorFlow segfault in array_ops.upper_bound

2026-04-01 CVE-2023-33976

highMicrosoft MSRC 2026-W14

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird &l

2026-04-01 CVE-2024-6614

mediumMicrosoft MSRC 2026-W14

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily e.g. leading to a denial of service (network is unreach

2026-04-01 CVE-2023-52340

highMicrosoft MSRC 2026-W14

The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed headers can lead to HTTP request smuggling. Specifically if a

2026-04-01 CVE-2024-27982

mediumMicrosoft MSRC 2026-W14

tipc: fix kernel warning when sending SYN message

2026-04-01 CVE-2023-52700

mediumMicrosoft MSRC 2026-W14

tmpfs: fix race on handling dquot rbtree

2026-04-01 CVE-2024-27058

mediumMicrosoft MSRC 2026-W14

tqdm CLI arguments injection attack

2026-04-01 CVE-2024-34062

mediumMicrosoft MSRC 2026-W14

tracing/timerlat: Only clear timer if a kthread exists

2026-04-01 CVE-2024-46845

highMicrosoft MSRC 2026-W14

tty: add the option to have a tty reject a new ldisc

2026-04-01 CVE-2024-40966

mediumMicrosoft MSRC 2026-W14

tun: limit printing rate when illegal packet received by tun dev

2026-04-01 CVE-2024-27013

mediumMicrosoft MSRC 2026-W14

twisted.web has disordered HTTP pipeline response

2026-04-01 CVE-2024-41671

highMicrosoft MSRC 2026-W14

uio_hv_generic: Don't free decrypted memory

2026-04-01 CVE-2024-36910

mediumMicrosoft MSRC 2026-W14

um: line: always fill *error_out in setup_one_line()

2026-04-01 CVE-2024-46844

highMicrosoft MSRC 2026-W14

Unintentional exposure of environment variables to subprocesses in sentry-sdk

2026-04-01 CVE-2024-40647

mediumMicrosoft MSRC 2026-W14

usb: atm: cxacru: fix endpoint checking in cxacru_bind()

2026-04-01 CVE-2024-41097

mediumMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in port "disable" sysfs attribute

2026-04-01 CVE-2024-26933

highMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in usb_deauthorize_interface()

2026-04-01 CVE-2024-26934

highMicrosoft MSRC 2026-W14

usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock

2026-04-01 CVE-2024-42085

mediumMicrosoft MSRC 2026-W14

usb: typec: tcpm: Check for port partner validity before consuming it

2026-04-01 CVE-2024-36893

mediumMicrosoft MSRC 2026-W14

usb: typec: ucsi: Limit read size on v1.2

2026-04-01 CVE-2024-35924

mediumMicrosoft MSRC 2026-W14

USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

2026-04-01 CVE-2024-27059

mediumMicrosoft MSRC 2026-W14

usbnet: ipheth: do not stop RX on failing RX callback

2026-04-01 CVE-2024-46861

mediumMicrosoft MSRC 2026-W14

Use after free in C++ protobuf

2026-04-01 CVE-2024-2410

highMicrosoft MSRC 2026-W14

Use After Free in editcap

2026-04-01 CVE-2024-4855

lowMicrosoft MSRC 2026-W14

userfaultfd: don't BUG_ON() if khugepaged yanks our page table

2026-04-01 CVE-2024-46838

mediumMicrosoft MSRC 2026-W14

vhost_task: Handle SIGKILL by flushing work and exiting

2026-04-01 CVE-2024-42135

mediumMicrosoft MSRC 2026-W14

virtio-pci: Check if is_avq is NULL

2026-04-01 CVE-2024-42134

mediumMicrosoft MSRC 2026-W14

virtio: packed: fix unmap leak for indirect desc table

2026-04-01 CVE-2024-27066

mediumMicrosoft MSRC 2026-W14

Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-30046

mediumMicrosoft MSRC 2026-W14

Visual Studio Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21405

highMicrosoft MSRC 2026-W14

Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21178

highMicrosoft MSRC 2026-W14

Vitess vulnerable to infinite memory consumption and vtgate crash

2026-04-01 CVE-2024-32886

mediumMicrosoft MSRC 2026-W14

vt: fix unicode buffer corruption when deleting characters

2026-04-01 CVE-2024-35823

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit v

2026-04-01 CVE-2024-21166

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21159

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21160

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21157

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-20996

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21173

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. E

2026-04-01 CVE-2024-21134

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21127

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21129

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21125

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily expl

2026-04-01 CVE-2024-21135

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21130

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21162

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21163

mediumMicrosoft MSRC 2026-W14