Security Warnings — Vendor: microsoft

HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c resulting in a corrupted instruction pointer.

2026-04-01 CVE-2024-32610

mediumMicrosoft MSRC 2026-W14

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

2026-04-01 CVE-2024-32611

criticalMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode resulting in the corruption of the instruction pointer and causing denial of service or potential code execution

2026-04-01 CVE-2024-29166

mediumMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32 resulting in the corruption of the instruction pointer and causing denial of service or potential code exec

2026-04-01 CVE-2024-29165

highMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset resulting in the corruption of the instruction pointer and causing denial of service or potential code exe

2026-04-01 CVE-2024-29159

criticalMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table resulting in the corruption of the instruction pointer and causing denial of service or potential cod

2026-04-01 CVE-2024-29161

highMicrosoft MSRC 2026-W14

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

2026-04-01 CVE-2024-29157

criticalMicrosoft MSRC 2026-W14

HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up

2026-04-01 CVE-2024-35997

mediumMicrosoft MSRC 2026-W14

HTML injection in HTTP redirect body

2026-04-01 CVE-2024-41810

mediumMicrosoft MSRC 2026-W14

hv_netvsc: Don't free decrypted memory

2026-04-01 CVE-2024-36911

mediumMicrosoft MSRC 2026-W14

i2c: lpi2c: Avoid calling clk_get_rate during transfer

2026-04-01 CVE-2024-40965

mediumMicrosoft MSRC 2026-W14

i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr

2026-04-01 CVE-2024-42153

mediumMicrosoft MSRC 2026-W14

i2c: smbus: fix NULL function pointer dereference

2026-04-01 CVE-2024-35984

mediumMicrosoft MSRC 2026-W14

IBM Spectrum Fusion HCI improper access control

2026-04-01 CVE-2023-43040

mediumMicrosoft MSRC 2026-W14

ibmvnic: Add tx check to prevent skb leak

2026-04-01 CVE-2024-41066

mediumMicrosoft MSRC 2026-W14

ice: Don't process extts if PTP is disabled

2026-04-01 CVE-2024-42107

mediumMicrosoft MSRC 2026-W14

ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()

2026-04-01 CVE-2022-48841

mediumMicrosoft MSRC 2026-W14

ice: protect XDP configuration with a mutex

2026-04-01 CVE-2024-46765

mediumMicrosoft MSRC 2026-W14

icmp: prevent possible NULL dereferences from icmp_build_probe()

2026-04-01 CVE-2024-35857

mediumMicrosoft MSRC 2026-W14

ila: call nf_unregister_net_hooks() sooner

2026-04-01 CVE-2024-46782

highMicrosoft MSRC 2026-W14

ima: Fix use-after-free on a dentry's dname.name

2026-04-01 CVE-2024-39494

highMicrosoft MSRC 2026-W14

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox &lt

2026-04-01 CVE-2024-6603

highMicrosoft MSRC 2026-W14

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipse

2026-04-01 CVE-2024-41184

criticalMicrosoft MSRC 2026-W14

Incomplete fix for CVE-2024-1929

2026-04-01 CVE-2024-2746

highMicrosoft MSRC 2026-W14

Integer Overflow caused by divide by zero during S3 suspension

2026-04-01 CVE-2024-1298

mediumMicrosoft MSRC 2026-W14

interconnect: Don't access req_list while it's being manipulated

2026-04-01 CVE-2024-27005

mediumMicrosoft MSRC 2026-W14

Internet Explorer Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21326

highMicrosoft MSRC 2026-W14

io_uring: drop any code related to SCM_RIGHTS

2026-04-01 CVE-2023-52656

lowMicrosoft MSRC 2026-W14

io_uring: fix possible deadlock in io_register_iowq_max_workers()

2026-04-01 CVE-2024-41080

mediumMicrosoft MSRC 2026-W14

io_uring/io-wq: Use set_bit() and test_bit() at worker->flags

2026-04-01 CVE-2024-39508

mediumMicrosoft MSRC 2026-W14

io_uring/sqpoll: work around a potential audit memory leak

2026-04-01 CVE-2024-41001

mediumMicrosoft MSRC 2026-W14

iommu/vt-d: Use device rbtree in iopf reporting path

2026-04-01 CVE-2024-35843

mediumMicrosoft MSRC 2026-W14

ionic: fix kernel panic due to multi-buffer handling

2026-04-01 CVE-2024-42083

mediumMicrosoft MSRC 2026-W14

ionic: use dev_consume_skb_any outside of napi

2026-04-01 CVE-2024-42071

mediumMicrosoft MSRC 2026-W14

IP Helper Denial of Service Vulnerability

2026-04-01 CVE-2025-21231

highMicrosoft MSRC 2026-W14

iPerf3 before 3.17 when used with OpenSSL before 3.2.0 as a server with RSA authentication allows a timing side channel in RSA decryption operations. This side channel could be suf

2026-04-01 CVE-2024-26306

mediumMicrosoft MSRC 2026-W14

ipv4: check for NULL idev in ip_route_use_hint()

2026-04-01 CVE-2024-36008

mediumMicrosoft MSRC 2026-W14

ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()

2026-04-01 CVE-2024-36902

mediumMicrosoft MSRC 2026-W14

ipv6: prevent NULL dereference in ip6_output()

2026-04-01 CVE-2024-36901

mediumMicrosoft MSRC 2026-W14

ipv6: prevent possible NULL deref in fib6_nh_init()

2026-04-01 CVE-2024-40961

mediumMicrosoft MSRC 2026-W14

ipv6: prevent possible NULL dereference in rt6_probe()

2026-04-01 CVE-2024-40960

mediumMicrosoft MSRC 2026-W14

ipv6: sr: fix memleak in seg6_hmac_init_algo

2026-04-01 CVE-2024-39489

mediumMicrosoft MSRC 2026-W14

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firef

2026-04-01 CVE-2024-6608

mediumMicrosoft MSRC 2026-W14

jfs: xattr: fix buffer overflow for invalid xattr

2026-04-01 CVE-2024-40902

highMicrosoft MSRC 2026-W14

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

2026-04-01 CVE-2024-34064

mediumMicrosoft MSRC 2026-W14

kdb: Fix buffer overflow during tab-complete

2026-04-01 CVE-2024-39480

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38238

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38241

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38242

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38243

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38244

highMicrosoft MSRC 2026-W14

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38245

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38052

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38054

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38057

highMicrosoft MSRC 2026-W14

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38237

highMicrosoft MSRC 2026-W14

kprobes: Fix possible use-after-free issue on kprobe registration

2026-04-01 CVE-2024-35955

highMicrosoft MSRC 2026-W14

ksmbd: discard write access to the directory open

2026-04-01 CVE-2024-41030

mediumMicrosoft MSRC 2026-W14

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

2026-04-01 CVE-2024-26952

highMicrosoft MSRC 2026-W14

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

2026-04-01 CVE-2023-52755

highMicrosoft MSRC 2026-W14