Security Warnings — Week: 2026-W14

smb: client: fix UAF in smb2_reconnect_server()

2026-04-01 CVE-2024-35870

mediumMicrosoft MSRC 2026-W14

smb: client: fix use-after-free bug in cifs_debug_data_proc_show()

2026-04-01 CVE-2023-52752

highMicrosoft MSRC 2026-W14

smb: client: fix use-after-free in smb2_query_info_compound()

2026-04-01 CVE-2023-52751

highMicrosoft MSRC 2026-W14

smb: client: guarantee refcounted children from parent session

2026-04-01 CVE-2024-35869

highMicrosoft MSRC 2026-W14

smb3: missing lock when picking channel

2026-04-01 CVE-2024-35999

mediumMicrosoft MSRC 2026-W14

SonicWall Email Security Appliance: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0944

lowBSI 2026-W14

spi: Fix null dereference on suspend

2026-04-01 CVE-2023-52749

mediumMicrosoft MSRC 2026-W14

spi: fix null pointer dereference within spi_sync

2026-04-01 CVE-2024-36930

mediumMicrosoft MSRC 2026-W14

spi: rockchip: Resolve unbalanced runtime PM / system PM handling

2026-04-01 CVE-2024-46846

mediumMicrosoft MSRC 2026-W14

spi: spi-mt65xx: Fix NULL pointer access in interrupt handler

2026-04-01 CVE-2024-27028

mediumMicrosoft MSRC 2026-W14

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21295

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-20701

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21303

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21308

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21317

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21331

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21332

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21333

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21335

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21373

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21398

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21414

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21415

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21425

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21428

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-21449

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-28928

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35256

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35271

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-35272

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37318

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37319

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37320

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37321

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37322

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37323

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37324

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37326

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37327

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37328

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37329

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37330

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37331

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37332

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37333

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-37336

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38087

highMicrosoft MSRC 2026-W14

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2026-04-01 CVE-2024-38088

highMicrosoft MSRC 2026-W14

Squashfs: check the inode number is not the invalid value of zero

2026-04-01 CVE-2024-26982

highMicrosoft MSRC 2026-W14

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC

2026-04-01 CVE-2024-40897

highMicrosoft MSRC 2026-W14

SUNRPC: fix a memleak in gss_import_v2_context

2026-04-01 CVE-2023-52653

mediumMicrosoft MSRC 2026-W14

SUNRPC: fix some memleaks in gssx_dec_option_array

2026-04-01 CVE-2024-27388

mediumMicrosoft MSRC 2026-W14

SUNRPC: lock against ->sock changing during sysfs read

2026-04-01 CVE-2022-48816

mediumMicrosoft MSRC 2026-W14

swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y

2026-04-01 CVE-2024-36925

mediumMicrosoft MSRC 2026-W14

tcp_metrics: validate source addr length

2026-04-01 CVE-2024-42154

mediumMicrosoft MSRC 2026-W14

tcp: avoid too many retransmit packets

2026-04-01 CVE-2024-41007

lowMicrosoft MSRC 2026-W14

TensorFlow segfault in array_ops.upper_bound

2026-04-01 CVE-2023-33976

highMicrosoft MSRC 2026-W14

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird &l

2026-04-01 CVE-2024-6614

mediumMicrosoft MSRC 2026-W14

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily e.g. leading to a denial of service (network is unreach

2026-04-01 CVE-2023-52340

highMicrosoft MSRC 2026-W14

The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed headers can lead to HTTP request smuggling. Specifically if a

2026-04-01 CVE-2024-27982

mediumMicrosoft MSRC 2026-W14