Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699236 source statements · aliases may refer to the same vulnerability

CVE-2026-86250Published

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie() and deleteChunkedCookie() functions. Attackers can send a crafted cookie header with an extremely large chunk co…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Secondary 7.5Source modified 18 Sep 2026Recorded 25 Oct 2026

CVE-2026-87151Published

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with ne…

cve-program ·

Vendor product: Oracle Bills of Material

CVSS 3.1 7.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87152Published

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with …

cve-program ·

Vendor product: Oracle Installed Base

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-92413Published

Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference

cve-program ·

Vendor product: MuPDF

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87153Published

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Product Hub

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87154Published

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Product Hub

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87156Published

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Product Hub

CVSS 3.1 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87157Published

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker…

cve-program ·

Vendor product: Oracle Order Management

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87158Published

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with ne…

cve-program ·

Vendor product: Oracle Order Management

CVSS 3.1 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-57173Published

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

cve-program ·

Vendor product: vllm

CVSS 3.1 6.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87169Published

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage Determination Online). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit…

cve-program ·

Vendor product: Oracle Contract Lifecycle Management for Public Sector

CVSS 3.1 6.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87171Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with n…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87174Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.2Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-69200Published

node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)

cve-program ·

Vendor product: node-opcua

CVSS 3.1 3.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87177Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-92399Published

GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

cve-program ·

Vendor product: GPAC

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93592Published

vLLM before 0.28.0 Denial of Service via negative token ID

cve-program ·

Vendor product: vllm

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-83312Published

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileg…

cve-program ·

Vendor product: Oracle BI Publisher

CVSS 3.1 7.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-64847Published

AnyIO process-pool workers can block indefinitely on undrained stderr

cve-program ·

Vendor product: anyio

CVSS 4.0 6.8Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-84992Published

md-editor-v3: XSS via fenced-code language rendering bypass

cve-program ·

Vendor product: md-editor-v3

CVSS 3.1 6.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2025-59953Published

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

cve-program ·

Vendor product: lmdeploy

CVSS 3.1 9.8Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-61552Published

Icinga 2 DSL Injection via Unescaped Import Template Name

cve-program ·

Vendor product: icinga2

CVSS 3.1 7.2Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-26947Published

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, l…

cve-program ·

Vendor product: ECS

CVSS 3.1 6.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-76834Published

b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

cve-program ·

Vendor product: b2evolution CMS

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-63445Published

Perses: Unvalidated project parameter enables filesystem path traversal

cve-program ·

Vendor product: perses

CVSS 4.0 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-74909Published

Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments

cve-program ·

https://catalog.redhat.com/software/containers/: rhbk/keycloak-operator-bundle · https://catalog.redhat.com/software/containers/: rhbk/keycloak-rhel9 · https://catalog.redhat.com/software/containers/: rhbk/keycloak-rhel9-operator

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-81178Published

SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity

cve-program ·

Vendor product: sysreptor

CVSS 3.1 3.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-77409Published

RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.2Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93453Published

SOGo before 5.12.11 Password Reset Token Interception via Origin Header

cve-program ·

Vendor product: SOGo

CVSS 4.0 8.7 · CVSS 3.1 8.3Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-59163Published

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

cve-program ·

Vendor product: mnemosyne

CVSS 3.1 9.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-92381Published

PbootCMS Template Rendering ContentController.php decode_string cross site scripting

cve-program ·

Vendor product: PbootCMS

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87178Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with net…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87191Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-77405Published

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 9.4Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-90168Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87193Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93602Published

rustls-webpki before 0.103.10 CRL Revocation Check Bypass

cve-program ·

Vendor product: webpki

CVSS 4.0 5.9 · CVSS 3.1 4.4Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87195Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with n…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.4Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-92565Published

Rallly before 4.15.0 Information Disclosure via polls.get

cve-program ·

Vendor product: rallly

CVSS 3.1 5.3 · CVSS 4.0 6.9Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93597Published

ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

cve-program ·

Vendor product: arcadedb

CVSS 4.0 5.3 · CVSS 3.1 7.7Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-63671Published

@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

cve-program ·

Vendor product: mdc

CVSS 3.1 8.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87206Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with n…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.4Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-81944Published

PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server

cve-program ·

Vendor product: PLANET IGS-5225-8P2T4S V1 · Vendor product: PLANET IGS-5225-8P2T4S V2

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-61709Published

OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

cve-program ·

Vendor product: openfga

CVSS 3.1 5.3Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87208Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-87209Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.1Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93596Published

ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect

cve-program ·

Vendor product: arcadedb

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93601Published

rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass

cve-program ·

Vendor product: webpki

CVSS 4.0 2.1 · CVSS 3.1 2.2Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-92363Published

ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption

cve-program ·

Vendor product: ag-ui

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 18 Sep 2026Recorded 23 Oct 2026

CVE-2026-93606Published

vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species

cve-program ·

Vendor product: vm2

CVSS 4.0 10.0 · CVSS 3.1 10.0Source modified 18 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.