Security Warnings — Source: msrc

Desktop Window Manager Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55681

highMicrosoft MSRC 2026-W14

DHCP Server Service Denial of Service Vulnerability

2026-03-31 CVE-2025-32725

highMicrosoft MSRC 2026-W14

DHCP Server Service Denial of Service Vulnerability

2026-03-31 CVE-2025-33050

highMicrosoft MSRC 2026-W14

DirectX Graphics Kernel Denial of Service Vulnerability

2026-03-31 CVE-2025-55698

highMicrosoft MSRC 2026-W14

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55678

highMicrosoft MSRC 2026-W14

dm cache: prevent BUG_ON by blocking retries on failed device resumes

2026-03-31 CVE-2025-38066

highMicrosoft MSRC 2026-W14

dm-bufio: don't schedule in atomic context

2026-03-31 CVE-2025-37928

highMicrosoft MSRC 2026-W14

dm: fix unconditional IO throttle caused by REQ_PREFLUSH

2026-03-31 CVE-2025-38063

highMicrosoft MSRC 2026-W14

dma-buf/dma-resv: check if the new fence is really later

2026-03-31 CVE-2022-49935

highMicrosoft MSRC 2026-W14

dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

2026-03-31 CVE-2025-38014

mediumMicrosoft MSRC 2026-W14

dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn

2026-03-31 CVE-2025-38042

mediumMicrosoft MSRC 2026-W14

DNS message with invalid TSIG causes an assertion failure

2026-03-31 CVE-2025-40775

highMicrosoft MSRC 2026-W14

Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-30387

criticalMicrosoft MSRC 2026-W14

driver core: fix potential NULL pointer dereference in dev_uevent()

2026-03-31 CVE-2025-37800

mediumMicrosoft MSRC 2026-W14

drivers/rapidio/rio_cm.c: prevent possible heap overwrite

2026-03-31 CVE-2025-38090

highMicrosoft MSRC 2026-W14

drm/amd/display: Do not set DRR on pipe Commit

2026-03-31 CVE-2023-53042

mediumMicrosoft MSRC 2026-W14

drm/amd/display: Fix slab-use-after-free in hdcp

2026-03-31 CVE-2025-37903

mediumMicrosoft MSRC 2026-W14

drm/amd/display: Guard Possible Null Pointer Dereference

2026-03-31 CVE-2025-37855

mediumMicrosoft MSRC 2026-W14

drm/amd/display: Increase block_sequence array size

2026-03-31 CVE-2025-38080

mediumMicrosoft MSRC 2026-W14

drm/amd/display: prevent hang on link training fail

2026-03-31 CVE-2025-37870

mediumMicrosoft MSRC 2026-W14

drm/amd/pm: Prevent division by zero

2026-03-31 CVE-2025-37766

mediumMicrosoft MSRC 2026-W14

drm/amd/pm: Prevent division by zero

2026-03-31 CVE-2025-37767

mediumMicrosoft MSRC 2026-W14

drm/amd/pm: Prevent division by zero

2026-03-31 CVE-2025-37768

mediumMicrosoft MSRC 2026-W14

drm/amd/pm: Prevent division by zero

2026-03-31 CVE-2025-37770

mediumMicrosoft MSRC 2026-W14

drm/amd/pm: Prevent division by zero

2026-03-31 CVE-2025-37771

mediumMicrosoft MSRC 2026-W14

drm/amd/pm/smu11: Prevent division by zero

2026-03-31 CVE-2025-37769

mediumMicrosoft MSRC 2026-W14

drm/amdgpu: csa unmap use uninterruptible lock

2026-03-31 CVE-2025-38011

mediumMicrosoft MSRC 2026-W14

drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini

2026-03-31 CVE-2023-53074

mediumMicrosoft MSRC 2026-W14

drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()

2026-03-31 CVE-2025-37852

mediumMicrosoft MSRC 2026-W14

drm/amdkfd: debugfs hang_hws skip GPU with MES

2026-03-31 CVE-2025-37853

mediumMicrosoft MSRC 2026-W14

drm/amdkfd: Fix mode1 reset crash issue

2026-03-31 CVE-2025-37854

mediumMicrosoft MSRC 2026-W14

drm/i915/huc: Fix fence not released on early probe errors

2026-03-31 CVE-2025-37754

mediumMicrosoft MSRC 2026-W14

drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()

2026-03-31 CVE-2025-37930

lowMicrosoft MSRC 2026-W14

drm/nouveau: prime: fix ttm_bo_delayed_delete oops

2026-03-31 CVE-2025-37765

mediumMicrosoft MSRC 2026-W14

drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

2026-03-31 CVE-2025-40096

highMicrosoft MSRC 2026-W14

drm/scheduler: fix fence ref counting

2026-03-31 CVE-2022-49829

mediumMicrosoft MSRC 2026-W14

drm/v3d: Add job to pending list if the reset was skipped

2026-03-31 CVE-2025-37951

highMicrosoft MSRC 2026-W14

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

2026-03-31 CVE-2025-49715

highMicrosoft MSRC 2026-W14

Erlang/OTP SSH Has Strict KEX Violations

2026-03-31 CVE-2025-46712

lowMicrosoft MSRC 2026-W14

espintcp: fix skb leaks

2026-03-31 CVE-2025-38057

mediumMicrosoft MSRC 2026-W14

Excessive CPU consumption in ParseAddress in net/mail

2026-03-31 CVE-2025-61725

mediumMicrosoft MSRC 2026-W14

Excessive CPU consumption in Reader.ReadResponse in net/textproto

2026-03-31 CVE-2025-61724

highMicrosoft MSRC 2026-W14

ext4: fix off-by-one error in do_split

2026-03-31 CVE-2025-23150

mediumMicrosoft MSRC 2026-W14

ext4: ignore xattrs past end

2026-03-31 CVE-2025-37738

highMicrosoft MSRC 2026-W14

Extraction filter bypass for linking outside extraction directory

2026-03-31 CVE-2025-4330

highMicrosoft MSRC 2026-W14

f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data

2026-03-31 CVE-2022-50009

mediumMicrosoft MSRC 2026-W14

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

2026-03-31 CVE-2025-37739

mediumMicrosoft MSRC 2026-W14

fbdev: omapfb: Add 'plane' value check

2026-03-31 CVE-2025-37851

mediumMicrosoft MSRC 2026-W14

firmware: arm_ffa: Set dma_mask for ffa devices

2026-03-31 CVE-2025-38043

mediumMicrosoft MSRC 2026-W14

firmware: arm_scmi: Balance device refcount when destroying devices

2026-03-31 CVE-2025-37905

lowMicrosoft MSRC 2026-W14

fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()

2026-03-31 CVE-2025-37988

highMicrosoft MSRC 2026-W14

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attacke

2026-03-31 CVE-2025-61099

highMicrosoft MSRC 2026-W14

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allow

2026-03-31 CVE-2025-61101

highMicrosoft MSRC 2026-W14

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows at

2026-03-31 CVE-2025-61106

highMicrosoft MSRC 2026-W14

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers

2026-03-31 CVE-2025-61105

highMicrosoft MSRC 2026-W14

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attacker

2026-03-31 CVE-2025-61104

highMicrosoft MSRC 2026-W14

fs: ntfs3: Fix integer overflow in run_unpack()

2026-03-31 CVE-2025-40068

highMicrosoft MSRC 2026-W14

fs/jfs: Prevent integer overflow in AG size calculation

2026-03-31 CVE-2025-37858

highMicrosoft MSRC 2026-W14

fs/ntfs3: Keep write operations atomic

2026-03-31 CVE-2025-37806

mediumMicrosoft MSRC 2026-W14

ftrace: Add cond_resched() to ftrace_graph_set_hash()

2026-03-31 CVE-2025-37940

mediumMicrosoft MSRC 2026-W14