Security Warnings — Week: 2026-W14

nvme: fix reconnection fail due to reserved tag allocation

2026-04-01 CVE-2024-27435

mediumMicrosoft MSRC 2026-W14

nvmet: always initialize cqe.result

2026-04-01 CVE-2024-41079

mediumMicrosoft MSRC 2026-W14

nvmet: fix a possible leak when destroy a ctrl during qp establishment

2026-04-01 CVE-2024-42152

mediumMicrosoft MSRC 2026-W14

ocfs2: fix DIO failure due to insufficient transaction credits

2026-04-01 CVE-2024-42077

mediumMicrosoft MSRC 2026-W14

ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()

2026-04-01 CVE-2024-40951

mediumMicrosoft MSRC 2026-W14

ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()

2026-04-01 CVE-2024-40952

mediumMicrosoft MSRC 2026-W14

OCSP stapling bypass with GnuTLS

2026-04-01 CVE-2024-8096

mediumMicrosoft MSRC 2026-W14

of: module: prevent NULL pointer dereference in vsnprintf()

2026-04-01 CVE-2024-35878

mediumMicrosoft MSRC 2026-W14

On-Premises Data Gateway Information Disclosure Vulnerability

2026-04-01 CVE-2025-21403

mediumMicrosoft MSRC 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0691

mediumBSI 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0711

highBSI 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0727

highBSI 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0743

highBSI 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0930

highBSI 2026-W14

OpenClaw: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0948

highBSI 2026-W14

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g. for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarl

2026-04-01 CVE-2024-39894

highMicrosoft MSRC 2026-W14

OpenSSL und LibreSSL: Mehrere Schwachstellen

2026-04-01 WID-SEC-2025-2166

mediumBSI 2026-W14

OpenSSL: CVE-2023-0464 Excessive Resource Usage Verifying X.509 Policy Constraints

2026-04-01 CVE-2023-0464

highMicrosoft MSRC 2026-W14

Output of "go env" does not sanitize values in cmd/go

2026-04-01 CVE-2023-24531

criticalMicrosoft MSRC 2026-W14

parisc: Try to fix random segmentation faults in package builds

2026-04-01 CVE-2024-40918

mediumMicrosoft MSRC 2026-W14

pci_iounmap(): Fix MMIO mapping leak

2026-04-01 CVE-2024-26977

mediumMicrosoft MSRC 2026-W14

PCI/MSI: Fix UAF in msi_capability_init

2026-04-01 CVE-2024-41096

highMicrosoft MSRC 2026-W14

Pcp: pmcd heap corruption through metric pmstore operations

2026-04-01 CVE-2024-45769

mediumMicrosoft MSRC 2026-W14

peci: cpu: Fix use-after-free in adev_release()

2026-04-01 CVE-2022-48670

highMicrosoft MSRC 2026-W14

Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting

2026-04-01 WID-SEC-2026-0941

lowBSI 2026-W14

perf/x86/intel: Limit the period on Haswell

2026-04-01 CVE-2024-46848

mediumMicrosoft MSRC 2026-W14

phy: marvell: a3700-comphy: Fix out of bounds read

2026-04-01 CVE-2024-35992

mediumMicrosoft MSRC 2026-W14

pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

2026-04-01 CVE-2024-42090

mediumMicrosoft MSRC 2026-W14

platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses

2026-04-01 CVE-2024-46859

highMicrosoft MSRC 2026-W14

PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks

2026-04-01 CVE-2024-4317

mediumMicrosoft MSRC 2026-W14

Potential memory exhaustion attack due to sparse slice deserialization

2026-04-01 CVE-2024-37298

highMicrosoft MSRC 2026-W14

powerpc/eeh: avoid possible crash when edev->pdev changes

2026-04-01 CVE-2024-41064

mediumMicrosoft MSRC 2026-W14

powerpc/powernv: Add a null pointer check in opal_powercap_init()

2026-04-01 CVE-2023-52696

highMicrosoft MSRC 2026-W14

powerpc/pseries: Fix potential memleak in papr_get_attr()

2026-04-01 CVE-2022-48669

mediumMicrosoft MSRC 2026-W14

powerpc/pseries: Fix scv instruction crash with kexec

2026-04-01 CVE-2024-42230

mediumMicrosoft MSRC 2026-W14

powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE

2026-04-01 CVE-2024-36926

mediumMicrosoft MSRC 2026-W14

powerpc/qspinlock: Fix deadlock in MCS queue

2026-04-01 CVE-2024-46797

mediumMicrosoft MSRC 2026-W14

PowerShell Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38033

highMicrosoft MSRC 2026-W14

PowerShell Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38043

highMicrosoft MSRC 2026-W14

PowerShell Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38046

highMicrosoft MSRC 2026-W14

PowerShell Elevation of Privilege Vulnerability

2026-04-01 CVE-2024-38047

highMicrosoft MSRC 2026-W14

pstore: inode: Only d_invalidate() is needed

2026-04-01 CVE-2024-27389

mediumMicrosoft MSRC 2026-W14

ptp: fix integer overflow in max_vclocks_store

2026-04-01 CVE-2024-40994

highMicrosoft MSRC 2026-W14

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

2026-04-01 CVE-2024-36039

mediumMicrosoft MSRC 2026-W14

Qemu-kvm: 'qemu-img info' leads to host file read/write

2026-04-01 CVE-2024-4467

highMicrosoft MSRC 2026-W14

Qemu-kvm: information leak in virtio devices

2026-04-01 CVE-2024-8612

lowMicrosoft MSRC 2026-W14

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

2026-04-01 CVE-2024-6505

mediumMicrosoft MSRC 2026-W14

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

2026-04-01 CVE-2024-4693

mediumMicrosoft MSRC 2026-W14

rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()

2026-04-01 CVE-2024-35929

highMicrosoft MSRC 2026-W14

RDMA/restrack: Fix potential invalid address access

2026-04-01 CVE-2024-42080

mediumMicrosoft MSRC 2026-W14

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

2026-04-01 CVE-2025-69223

highRed Hat 2026-W14

Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Offenlegung von Informationen

2026-04-01 WID-SEC-2025-1265

mediumBSI 2026-W14

RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling

2026-04-01 CVE-2024-6387

highMicrosoft MSRC 2026-W14

Redis allows denial-of-service due to malformed ACL selectors

2026-04-01 CVE-2024-51741

mediumMicrosoft MSRC 2026-W14

Redis' Lua library commands may lead to remote code execution

2026-04-01 CVE-2024-46981

highMicrosoft MSRC 2026-W14

Regular-expression DoS when parsing TarFile headers

2026-04-01 CVE-2024-6232

highMicrosoft MSRC 2026-W14

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-04-01 CVE-2023-52733

highMicrosoft MSRC 2026-W14

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-04-01 CVE-2024-26929

highMicrosoft MSRC 2026-W14

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-04-01 CVE-2024-44955

mediumMicrosoft MSRC 2026-W14

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavi

2026-04-01 CVE-2024-6484

lowMicrosoft MSRC 2026-W14