Vendor: microsoft

page_pool: avoid infinite loop to schedule delayed worker

2026-03-31 CVE-2025-37859

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

2026-03-31 CVE-2023-53154

PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

2026-03-31 CVE-2025-38069

PCI: Fix reference leak in pci_register_host_bridge()

2026-03-31 CVE-2025-37836

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

2026-03-31 CVE-2025-23161

pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

2026-03-31 CVE-2025-37887

pds_core: make wait_context part of q_info

2026-03-31 CVE-2025-37886

pds_core: Prevent possible adminq overflow/stuck condition

2026-03-31 CVE-2025-37987

pds_core: remove write-after-free of client_id

2026-03-31 CVE-2025-37916

perf: Fix hang while freeing sigtrap event

2026-03-31 CVE-2025-37747

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

2026-03-31 CVE-2025-37878

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

2026-03-31 CVE-2025-37936

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

2026-03-31 CVE-2025-40914

criticalMicrosoft MSRC 2026-W14

Perl threads have a working directory race condition where file operations may target unintended paths

2026-03-31 CVE-2025-40909

ping in iputils before 20250602 allows a denial of service

2026-03-31 CVE-2025-47268

platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()

2026-03-31 CVE-2025-38077

Playwright Spoofing Vulnerability

2026-03-31 CVE-2025-59288

pm: cpupower: bench: Prevent NULL dereference on malloc failure

2026-03-31 CVE-2025-37841

PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

2026-03-31 CVE-2025-37745

Podman: podman missing tls verification

2026-03-31 CVE-2025-6032

Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

2026-03-31 CVE-2025-5455

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

2026-03-31 CVE-2025-4207

Power Automate Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-47966

criticalMicrosoft MSRC 2026-W14

powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

2026-03-31 CVE-2025-38088

powerpc/rtas: Fix RTAS MSR[HV] handling for Cell

2026-03-31 CVE-2022-49955

PowerShell Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-25004

ptp: Add a upper bound on max_vclocks

2026-03-31 CVE-2025-40057

PyTorch nccl.py torch.cuda.nccl.reduce denial of service

2026-03-31 CVE-2025-4287

qibfs: fix _another_ leak

2026-03-31 CVE-2025-37983

Quadratic complexity when checking name constraints in crypto/x509

2026-03-31 CVE-2025-58187

Quadratic complexity when parsing some invalid inputs in encoding/pem

2026-03-31 CVE-2025-61723

QUIC certificate check skip with wolfSSL

2026-03-31 CVE-2025-4947

RabbitMQ Node can log Basic Auth header from an HTTP request

2026-03-31 CVE-2025-50200

RDMA/cma: Fix workqueue crash in cma_netevent_work_handler

2026-03-31 CVE-2025-37772

RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

2026-03-31 CVE-2025-38022

RDMA/core: Silence oversized kvmalloc() warning

2026-03-31 CVE-2025-37867

Redis Enterprise Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59271

redis-check-aof may lead to stack overflow and potential RCE

2026-03-31 CVE-2025-27151

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37782

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37804

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37976

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-29966

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-29967

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58718

Remote Desktop Protocol Client Information Disclosure Vulnerability

2026-03-31 CVE-2025-32715

Remote Desktop Protocol Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58737

Remote Procedure Call Denial of Service Vulnerability

2026-03-31 CVE-2025-59502

Requests vulnerable to .netrc credentials leak via malicious URLs

2026-03-31 CVE-2024-47081

Ring: some aes functions may panic when overflow checking is enabled in ring

2026-03-31 CVE-2025-4432

RISC-V: KVM: Write hgatp register with valid mode bits

2026-03-31 CVE-2025-40065

riscv, bpf: Sign extend struct ops return values properly

2026-03-31 CVE-2025-40079

riscv: uprobes: Add missing fence.i after building the XOL buffer

2026-03-31 CVE-2025-37822

rseq: Fix segfault on registration when rseq_cs is non-zero

2026-03-31 CVE-2025-38067

s390/sclp: Add check for get_zeroed_page()

2026-03-31 CVE-2025-37883

sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

2026-03-31 CVE-2025-38000

sch_htb: make htb_qlen_notify() idempotent

2026-03-31 CVE-2025-37932

Scripting Engine Memory Corruption Vulnerability

2026-03-31 CVE-2025-30397

scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID

2026-03-31 CVE-2022-50467

scsi: mpi3mr: Bad drive in topology results kernel crash

2026-03-31 CVE-2023-53037