Week: 2026-W14

redis-check-aof may lead to stack overflow and potential RCE

2026-03-31 CVE-2025-27151

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37782

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37804

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-03-31 CVE-2025-37976

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-29966

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-29967

Remote Desktop Client Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58718

Remote Desktop Protocol Client Information Disclosure Vulnerability

2026-03-31 CVE-2025-32715

Remote Desktop Protocol Remote Code Execution Vulnerability

2026-03-31 CVE-2025-58737

Remote Procedure Call Denial of Service Vulnerability

2026-03-31 CVE-2025-59502

Requests vulnerable to .netrc credentials leak via malicious URLs

2026-03-31 CVE-2024-47081

Ring: some aes functions may panic when overflow checking is enabled in ring

2026-03-31 CVE-2025-4432

RISC-V: KVM: Write hgatp register with valid mode bits

2026-03-31 CVE-2025-40065

riscv, bpf: Sign extend struct ops return values properly

2026-03-31 CVE-2025-40079

riscv: uprobes: Add missing fence.i after building the XOL buffer

2026-03-31 CVE-2025-37822

rseq: Fix segfault on registration when rseq_cs is non-zero

2026-03-31 CVE-2025-38067

s390/sclp: Add check for get_zeroed_page()

2026-03-31 CVE-2025-37883

sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

2026-03-31 CVE-2025-38000

sch_htb: make htb_qlen_notify() idempotent

2026-03-31 CVE-2025-37932

Scripting Engine Memory Corruption Vulnerability

2026-03-31 CVE-2025-30397

scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID

2026-03-31 CVE-2022-50467

scsi: mpi3mr: Bad drive in topology results kernel crash

2026-03-31 CVE-2023-53037

scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

2026-03-31 CVE-2025-37861

scsi: st: Fix array overflow in st_setup()

2026-03-31 CVE-2025-37857

scsi: target: iscsi: Fix timeout on deleted connection

2026-03-31 CVE-2025-38075

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

2026-03-31 CVE-2025-37826

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

2026-03-31 CVE-2025-37977

scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()

2026-03-31 CVE-2025-37828

sctp: detect and prevent references to a freed transport in sendmsg

2026-03-31 CVE-2025-23142

Sensitive headers not cleared on cross-origin redirect in net/http

2026-03-31 CVE-2025-4673

serial: mctrl_gpio: split disable_ms into sync and no_sync APIs

2026-03-31 CVE-2025-38040

setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow

2026-03-31 CVE-2025-49112

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

2026-03-31 CVE-2025-47273

smb: client: Avoid race in open_cached_dir with lease breaks

2026-03-31 CVE-2025-37954

smb: client: Fix refcount leak for cifs_sb_tlink

2026-03-31 CVE-2025-40103

smb: client: fix UAF in decryption with multichannel

2026-03-31 CVE-2025-37750

smb: client: Fix use-after-free in cifs_fill_dirent

2026-03-31 CVE-2025-38051

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

2026-03-31 CVE-2025-23148

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59199

sound/virtio: Fix cancel_sync warnings on uninitialized work_structs

2026-03-31 CVE-2025-37805

spdlog pattern_formatter-inl.h scoped_padder resource consumption

2026-03-31 CVE-2025-6140

spi-rockchip: Fix register out of bounds access

2026-03-31 CVE-2025-38081

spi: fsl-qspi: use devm function instead of driver remove

2026-03-31 CVE-2025-37842

spi: spi-imx: Add check for spi_imx_setupxfer()

2026-03-31 CVE-2025-37801

Squashfs: fix uninit-value in squashfs_get_parent

2026-03-31 CVE-2025-40049

Storage Spaces Direct Information Disclosure Vulnerability

2026-03-31 CVE-2025-59184

Storport.sys Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59192

Sudo before 1.9.17p1 allows local users to obtain root access

2026-03-31 CVE-2025-32463

criticalMicrosoft MSRC 2026-W14

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

2026-03-31 CVE-2025-32462