CVE-2026-94627Published
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
cve-program ·
Vendor product: vllm
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699171 source statements · aliases may refer to the same vulnerabilityCVE-2026-94425Published
Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management
cve-program ·
Vendor product: MTT S80 Driver Package
CVE-2026-94492Published
Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection
cve-program ·
Vendor product: U8cloud
CVE-2026-93655Published
Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter
cve-program ·
Vendor product: Booking Calendar
CVE-2026-74766Published
Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode
cve-program ·
https://cpan.org/modules: Net-IDN-Encode
CVE-2026-63272Published
Heap buffer overflow in WMF text record import
cve-program ·
Vendor product: LibreOffice
CVE-2026-63275Published
Stack buffer overflow in CFF font hint handling
cve-program ·
Vendor product: LibreOffice
CVE-2026-63276Published
Stack buffer overflow in CFF to Type 1 font conversion
cve-program ·
Vendor product: LibreOffice
CVE-2026-63278Published
Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
cve-program ·
Vendor product: LibreOffice
CVE-2026-63279Published
Out of bounds read in PICT image import
cve-program ·
Vendor product: LibreOffice
CVE-2026-89420Published
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
cve-program ·
https://repo.hex.pm: mpp · https://github.com: zenhive/mpp
CVE-2026-87119Published
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
cve-program ·
https://repo.hex.pm: mpp · https://github.com: zenhive/mpp
GO-2026-5015Published
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
osv · CVE-2026-39835 · GHSA-78mq-xcr3-xm33
Go: golang.org/x/crypto
GO-2026-5033Published
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
osv · CVE-2026-46598 · GHSA-9m57-25v3-79x9
Go: golang.org/x/crypto
GO-2026-5020Published
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
osv · CVE-2026-39834 · GHSA-rm3j-f69w-wqmq
Go: golang.org/x/crypto
GO-2026-5027Published
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
osv · CVE-2026-42502
Go: golang.org/x/net
GO-2026-5031Published
Panic when reading out of bound palette index in golang.org/x/image/bmp
osv · CVE-2026-42500
Go: golang.org/x/image
GO-2026-5029Published
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
osv · CVE-2026-25681
Go: golang.org/x/net
GO-2026-4979Published
Invoking "go tool pack" does not sanitize output paths in cmd/go
osv · BIT-golang-2026-39817 · CVE-2026-39817
Go: toolchain
GO-2026-4978Published
Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
osv · BIT-golang-2026-39819 · CVE-2026-39819
Go: toolchain
GO-2026-5030Published
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
osv · CVE-2026-27136
Go: golang.org/x/net
GO-2026-4962Published
Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
osv · CVE-2026-33812
Go: golang.org/x/image
GO-2026-5016Published
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
osv · CVE-2026-39827 · GHSA-qpw4-5x99-6vjp
Go: golang.org/x/crypto
CVE-2026-76974Published
Information Disclosure vulnerability in SAP Fiori Launchpad
cve-program ·
Vendor product: SAP Fiori Launchpad
CVE-2026-13355Published
Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter
cve-program ·
Vendor product: Meta Box Frontend Submission
CVE-2026-19658Published
Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter
cve-program ·
Vendor product: Give Tributes
CVE-2026-12995Published
Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter
cve-program ·
Vendor product: Custom Field Template
CVE-2026-16778Published
Live Composer <= 2.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content
cve-program ·
Vendor product: Live Composer – Free WordPress Website Builder
CVE-2026-92969Published
HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
cve-program ·
Vendor product: HUSKY – Products Filter for WooCommerce Professional
CVE-2025-14486Published
PixelPlay <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' Parameter
cve-program ·
Vendor product: PixelPlay
CVE-2025-14484Published
Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter
cve-program ·
Vendor product: Image Buzz
CVE-2026-4123Published
RW Elephant Rental Inventory <= 2.3.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'toggle_cache' AJAX Action
cve-program ·
Vendor product: RW Elephant Rental Inventory
CVE-2025-1281Published
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion
cve-program ·
Vendor product: BM Content Builder
CVE-2026-92235Published
WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter
cve-program ·
Vendor product: WP Ultimate Review
CVE-2026-93778Published
WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)
cve-program ·
Vendor product: WP Yelp Review Slider
CVE-2025-14487Published
Handily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter
cve-program ·
Vendor product: Handily
CVE-2025-1280Published
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read
cve-program ·
Vendor product: BM Content Builder
CVE-2026-18345Published
WP User Manager <= 2.9.18 - Missing Authorization to Authenticated (Subscriber+) Stripe Account Hijack via Stripe Connect Callback
cve-program ·
Vendor product: WP User Manager – User Profile Builder & Membership
CVE-2026-7622Published
ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
cve-program ·
Vendor product: ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More
CVE-2026-9004Published
WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
cve-program ·
Vendor product: WP-CRM System – Manage Clients and Projects
CVE-2026-93836Published
WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
cve-program ·
Vendor product: WPC Product Bundles for WooCommerce
CVE-2026-9231Published
WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute
cve-program ·
Vendor product: WP Travel Engine – Tour Booking Plugin – Tour Operator Software
CVE-2026-93556Published
Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini
cve-program ·
Vendor product: Tankuam Places
CVE-2026-94117Published
WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability
cve-program ·
https://wordpress.org/plugins: hashbar-wp-notification-bar
CVE-2026-25254Published
Improper authorization in Qualcomm Software Center
cve-program ·
Vendor product: Snapdragon
CVE-2026-25255Published
Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
cve-program ·
Vendor product: Snapdragon
CVE-2026-25262Published
Write-what-where Condition in Primary Bootloader
cve-program ·
Vendor product: Snapdragon
CVE-2026-25264Published
Uncontrolled Search Path Element in Qualcomm Software Center
cve-program ·
Vendor product: Snapdragon
CVE-2026-25265Published
Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
cve-program ·
Vendor product: Snapdragon
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.