Source: msrc

ksmbd: fix use-after-free in kerberos authentication

2026-03-31 CVE-2025-37924

ksmbd: fix use-after-free in ksmbd_session_rpc_open

2026-03-31 CVE-2025-37926

ksmbd: fix use-after-free in session logoff

2026-03-31 CVE-2025-37899

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

2026-03-31 CVE-2025-37776

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

2026-03-31 CVE-2025-37802

ksmbd: prevent out-of-bounds stream writes by validating *pos

2026-03-31 CVE-2025-37947

ksmbd: prevent rename with empty string

2026-03-31 CVE-2025-37956

KVM: arm64: Prevent access to vCPU events before init

2026-03-31 CVE-2025-40102

KVM: arm64: Tear down vGIC on failed vCPU creation

2026-03-31 CVE-2025-37849

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

2026-03-31 CVE-2025-37957

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

2026-03-31 CVE-2022-49932

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

2026-03-31 CVE-2025-23141

KVM: x86: Reset IRTE to host control if new route isn't postable

2026-03-31 CVE-2025-37885

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

2026-03-31 CVE-2022-50224

Lack of limit when parsing cookies can cause memory exhaustion in net/http

2026-03-31 CVE-2025-58186

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

2026-03-31 CVE-2025-5914

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

2026-03-31 CVE-2025-5915

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

2026-03-31 CVE-2025-5916

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

2026-03-31 CVE-2025-5917

Libarchive: reading past eof may be triggered for piped file streams

2026-03-31 CVE-2025-5918

libnvdimm/labels: Fix divide error in nd_label_data_init()

2026-03-31 CVE-2025-38072

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

2026-03-31 CVE-2025-4948

Libsoup: null pointer dereference in libsoup may lead to denial of service

2026-03-31 CVE-2025-4476

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

2026-03-31 CVE-2025-4969

Libssh: out-of-bounds read in sftp_handle()

2026-03-31 CVE-2025-5318

Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

2026-03-31 CVE-2025-49133

Libxml: heap use after free (uaf) leads to denial of service (dos)

2026-03-31 CVE-2025-49794

criticalMicrosoft MSRC 2026-W14

Libxml: null pointer dereference leads to denial of service (dos)

2026-03-31 CVE-2025-49795

Libxml: type confusion leads to denial of service (dos)

2026-03-31 CVE-2025-49796

criticalMicrosoft MSRC 2026-W14

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

2026-03-31 CVE-2025-6021

Libxml2: stack buffer overflow in xmllint interactive shell command handling

2026-03-31 CVE-2025-6170

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

2026-03-31 CVE-2025-11731

Linux-pam: linux-pam directory traversal

2026-03-31 CVE-2025-6020

LoongArch: Return NULL from huge_pte_offset() for invalid PMD

2026-03-31 CVE-2025-37818

M365 Copilot Information Disclosure Vulnerability

2026-03-31 CVE-2025-32711

criticalMicrosoft MSRC 2026-W14

M365 Copilot Information Disclosure Vulnerability

2026-03-31 CVE-2025-59252

criticalMicrosoft MSRC 2026-W14

mcb: fix a double free bug in chameleon_parse_gdd()

2026-03-31 CVE-2025-37817

media: cx231xx: set device_caps for 417

2026-03-31 CVE-2025-38044

media: venus: hfi_parser: add check to avoid out of bound access

2026-03-31 CVE-2025-23157

media: venus: hfi_parser: refactor hfi packet parsing logic

2026-03-31 CVE-2025-23156

media: venus: hfi: add a check to handle OOB in sfr region

2026-03-31 CVE-2025-23159

media: venus: hfi: add check to handle incorrect queue size

2026-03-31 CVE-2025-23158

memblock: Accept allocated memory before use in memblock_double_array()

2026-03-31 CVE-2025-37960

mfd: ene-kb3930: Fix a potential NULL pointer dereference

2026-03-31 CVE-2025-23146

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-47968

Microsoft Azure File Sync Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29973

Microsoft Brokering File System Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29970

Microsoft Brokering File System Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-48004

Microsoft Brokering File System Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59189

Microsoft Configuration Manager Spoofing Vulnerability

2026-03-31 CVE-2025-59501

Microsoft Dataverse Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29826

Microsoft Dataverse Remote Code Execution Vulnerability

2026-03-31 CVE-2025-47732

Microsoft Defender Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-26684

Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-47161

Microsoft Defender for Identity Spoofing Vulnerability

2026-03-31 CVE-2025-26685

Microsoft Defender for Linux Denial of Service Vulnerability

2026-03-31 CVE-2025-59497

Microsoft DWM Core Library Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-30400

Microsoft DWM Core Library Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-58722

Microsoft DWM Core Library Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59254