Security Warnings — Week: 2026-W14

tipc: fix kernel warning when sending SYN message

2026-04-01 CVE-2023-52700

mediumMicrosoft MSRC 2026-W14

tmpfs: fix race on handling dquot rbtree

2026-04-01 CVE-2024-27058

mediumMicrosoft MSRC 2026-W14

tqdm CLI arguments injection attack

2026-04-01 CVE-2024-34062

mediumMicrosoft MSRC 2026-W14

tracing/timerlat: Only clear timer if a kthread exists

2026-04-01 CVE-2024-46845

highMicrosoft MSRC 2026-W14

tty: add the option to have a tty reject a new ldisc

2026-04-01 CVE-2024-40966

mediumMicrosoft MSRC 2026-W14

tun: limit printing rate when illegal packet received by tun dev

2026-04-01 CVE-2024-27013

mediumMicrosoft MSRC 2026-W14

twisted.web has disordered HTTP pipeline response

2026-04-01 CVE-2024-41671

highMicrosoft MSRC 2026-W14

uio_hv_generic: Don't free decrypted memory

2026-04-01 CVE-2024-36910

mediumMicrosoft MSRC 2026-W14

um: line: always fill *error_out in setup_one_line()

2026-04-01 CVE-2024-46844

highMicrosoft MSRC 2026-W14

Unintentional exposure of environment variables to subprocesses in sentry-sdk

2026-04-01 CVE-2024-40647

mediumMicrosoft MSRC 2026-W14

usb: atm: cxacru: fix endpoint checking in cxacru_bind()

2026-04-01 CVE-2024-41097

mediumMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in port "disable" sysfs attribute

2026-04-01 CVE-2024-26933

highMicrosoft MSRC 2026-W14

USB: core: Fix deadlock in usb_deauthorize_interface()

2026-04-01 CVE-2024-26934

highMicrosoft MSRC 2026-W14

usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock

2026-04-01 CVE-2024-42085

mediumMicrosoft MSRC 2026-W14

usb: typec: tcpm: Check for port partner validity before consuming it

2026-04-01 CVE-2024-36893

mediumMicrosoft MSRC 2026-W14

usb: typec: ucsi: Limit read size on v1.2

2026-04-01 CVE-2024-35924

mediumMicrosoft MSRC 2026-W14

USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

2026-04-01 CVE-2024-27059

mediumMicrosoft MSRC 2026-W14

usbnet: ipheth: do not stop RX on failing RX callback

2026-04-01 CVE-2024-46861

mediumMicrosoft MSRC 2026-W14

Use after free in C++ protobuf

2026-04-01 CVE-2024-2410

highMicrosoft MSRC 2026-W14

Use After Free in editcap

2026-04-01 CVE-2024-4855

lowMicrosoft MSRC 2026-W14

userfaultfd: don't BUG_ON() if khugepaged yanks our page table

2026-04-01 CVE-2024-46838

mediumMicrosoft MSRC 2026-W14

vhost_task: Handle SIGKILL by flushing work and exiting

2026-04-01 CVE-2024-42135

mediumMicrosoft MSRC 2026-W14

vim: Schwachstelle ermöglicht Codeausführung

2026-04-01 WID-SEC-2026-0940

highBSI 2026-W14

virtio-pci: Check if is_avq is NULL

2026-04-01 CVE-2024-42134

mediumMicrosoft MSRC 2026-W14

virtio: packed: fix unmap leak for indirect desc table

2026-04-01 CVE-2024-27066

mediumMicrosoft MSRC 2026-W14

Visual Studio Denial of Service Vulnerability

2026-04-01 CVE-2024-30046

mediumMicrosoft MSRC 2026-W14

Visual Studio Elevation of Privilege Vulnerability

2026-04-01 CVE-2025-21405

highMicrosoft MSRC 2026-W14

Visual Studio Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21178

highMicrosoft MSRC 2026-W14

Vitess vulnerable to infinite memory consumption and vtgate crash

2026-04-01 CVE-2024-32886

mediumMicrosoft MSRC 2026-W14

vt: fix unicode buffer corruption when deleting characters

2026-04-01 CVE-2024-35823

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit v

2026-04-01 CVE-2024-21166

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21159

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21160

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21157

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-20996

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vul

2026-04-01 CVE-2024-21173

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. E

2026-04-01 CVE-2024-21134

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21127

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21129

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitabl

2026-04-01 CVE-2024-21125

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily expl

2026-04-01 CVE-2024-21135

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21130

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21162

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21163

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily expl

2026-04-01 CVE-2024-21171

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnera

2026-04-01 CVE-2024-21165

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior.

2026-04-01 CVE-2024-21142

mediumMicrosoft MSRC 2026-W14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulner

2026-04-01 CVE-2024-21176

mediumMicrosoft MSRC 2026-W14

watchdog: Fix possible use-after-free in wdt_startup()

2026-04-01 CVE-2021-47324

highMicrosoft MSRC 2026-W14

watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

2026-04-01 CVE-2021-47323

highMicrosoft MSRC 2026-W14

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

2026-04-01 CVE-2024-34069

highMicrosoft MSRC 2026-W14

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This

2026-04-01 CVE-2024-4773

highMicrosoft MSRC 2026-W14

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunder

2026-04-01 CVE-2024-4770

highMicrosoft MSRC 2026-W14

wifi: ath12k: fix kernel crash during resume

2026-04-01 CVE-2024-40979

mediumMicrosoft MSRC 2026-W14

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

2026-04-01 CVE-2023-52827

highMicrosoft MSRC 2026-W14

wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

2026-04-01 CVE-2024-42114

mediumMicrosoft MSRC 2026-W14

wifi: iwlwifi: mvm: ensure offloading TID queue exists

2026-04-01 CVE-2024-27056

mediumMicrosoft MSRC 2026-W14

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

2026-04-01 CVE-2024-36921

highMicrosoft MSRC 2026-W14

wifi: iwlwifi: read txq->read_ptr under lock

2026-04-01 CVE-2024-36922

mediumMicrosoft MSRC 2026-W14

wifi: mt76: mt7921s: fix potential hung tasks during chip recovery

2026-04-01 CVE-2024-40977

mediumMicrosoft MSRC 2026-W14