Week: 2026-W14

iio: light: opt3001: fix deadlock due to concurrent flag access

2026-03-31 CVE-2025-37968

ImageMagick: Mehrere Schwachstellen

2026-03-31 WID-SEC-2026-0148

highBSI 2026-W14

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58730

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58731

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58732

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58733

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58734

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58735

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58736

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58738

Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

2026-03-31 CVE-2025-0913

Input: mtk-pmic-keys - fix possible null pointer dereference

2026-03-31 CVE-2025-37972

Insecure file handling vulnerability

2026-03-31 CVE-2025-22247

Insufficient validation of bracketed IPv6 hostnames in net/url

2026-03-31 CVE-2025-47912

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-03-31 CVE-2025-59282

Internet Shortcut Files Remote Code Execution Vulnerability

2026-03-31 CVE-2025-33053

iommu: Clear iommu-dma ops on cleanup

2026-03-31 CVE-2025-37877

iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid

2026-03-31 CVE-2025-37927

ipvs: fix uninit-value for saddr in do_output_route4

2026-03-31 CVE-2025-37961

irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

2026-03-31 CVE-2025-37819

irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs

2026-03-31 CVE-2025-37901

isofs: Prevent the use of too small fid

2026-03-31 CVE-2025-37780

jbd2: remove wrong sb->s_sequence check

2026-03-31 CVE-2025-37839

JDBC Driver for SQL Server Spoofing Vulnerability

2026-03-31 CVE-2025-59250

jfs: add sanity check for agwidth in dbMount

2026-03-31 CVE-2025-37740

jfs: Fix uninit-value access of imap allocated in the diMount() function

2026-03-31 CVE-2025-37742

jfs: Prevent copying of nlink with value 0 from disk inode

2026-03-31 CVE-2025-37741

jq has signed integer overflow in jv.c:jvp_array_write

2026-03-31 CVE-2024-23337

juliangruber brace-expansion index.js expand redos

2026-03-31 CVE-2025-5889

kasan: avoid sleepable page allocation from atomic context

2026-03-31 CVE-2025-38029

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-24063

ksmbd: Fix dangling pointer in krb_authenticate

2026-03-31 CVE-2025-37778

ksmbd: fix recursive locking in RPC handle list access

2026-03-31 CVE-2025-40090

ksmbd: fix the warning from __kernel_write_iter

2026-03-31 CVE-2025-37775

ksmbd: Fix UAF in __close_file_table_ids

2026-03-31 CVE-2025-37952

ksmbd: fix use-after-free in __smb2_lease_break_noti()

2026-03-31 CVE-2025-37777

ksmbd: fix use-after-free in kerberos authentication

2026-03-31 CVE-2025-37924

ksmbd: fix use-after-free in ksmbd_session_rpc_open

2026-03-31 CVE-2025-37926

ksmbd: fix use-after-free in session logoff

2026-03-31 CVE-2025-37899

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

2026-03-31 CVE-2025-37776

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

2026-03-31 CVE-2025-37802

ksmbd: prevent out-of-bounds stream writes by validating *pos

2026-03-31 CVE-2025-37947

ksmbd: prevent rename with empty string

2026-03-31 CVE-2025-37956

KVM: arm64: Prevent access to vCPU events before init

2026-03-31 CVE-2025-40102

KVM: arm64: Tear down vGIC on failed vCPU creation

2026-03-31 CVE-2025-37849

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

2026-03-31 CVE-2025-37957

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

2026-03-31 CVE-2022-49932

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

2026-03-31 CVE-2025-23141

KVM: x86: Reset IRTE to host control if new route isn't postable

2026-03-31 CVE-2025-37885

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

2026-03-31 CVE-2022-50224

Kyverno: Schwachstelle ermöglicht Offenlegung von Informationen

2026-03-31 WID-SEC-2026-0919

mediumBSI 2026-W14

Lack of limit when parsing cookies can cause memory exhaustion in net/http

2026-03-31 CVE-2025-58186

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

2026-03-31 CVE-2025-5914

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

2026-03-31 CVE-2025-5915

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

2026-03-31 CVE-2025-5916

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

2026-03-31 CVE-2025-5917

Libarchive: reading past eof may be triggered for piped file streams

2026-03-31 CVE-2025-5918

libarchive: Schwachstelle ermöglicht Codeausführung

2026-03-31 WID-SEC-2026-0923

mediumBSI 2026-W14

libnvdimm/labels: Fix divide error in nd_label_data_init()

2026-03-31 CVE-2025-38072